Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.
[
{
"product": "SAP Data Hub (DH_Foundation)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 2.0"
}
]
}
]