SAP Cloud Connector Code Injection Vulnerability

SAP Cloud Connector is a connector for connecting to the SAP Cloud Platform from SAP Germany. A code injection vulnerability exists in SAP Cloud Connector versions prior to 2.11.3, which can be exploited by a remote attacker to execute the injected code and compromise the operation of the...

SAP Cloud Connector Authorization Issues Vulnerability

SAP Cloud Connector is a connector for connecting to the SAP Cloud Platform from SAP Germany. An authorization issue vulnerability exists in SAP Cloud Connector versions prior to 2.11.3, which stems from the program failing to perform any authentication and can be exploited by an attacker to...

CVE-2019-0246

SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity...

CVE-2019-0247

SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

Code injection

SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

Authentication flaw

SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity...

CVE-2019-0246

SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity...

CVE-2019-0247

SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2019-0246

SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity...

CVE-2019-0247

SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2019-0246

The vulnerability CVE-2019-0246 affects the SAP Cloud Connector prior to version 2.11.3. The root cause is that certain functionalities requiring user identity do not perform authentication checks, enabling potential unauthorized actions. Impact is high: exposed confidentiality, integrity, and av...

CVE-2019-0247

SAP Cloud Connector is affected by a code-injection vulnerability in versions prior to 2.11.3. The root cause is an injectable code path that can be executed by an attacker, allowing them to control the application's behavior. Remediation: upgrade to version 2.11.3 or later (vendor SAP guidance)....

PT-2019-11210

Name of the Vulnerable Software and Affected Versions: SAP Cloud Connector versions prior to 2.11.3 Description: The issue concerns a lack of authentication checks for certain functionalities that require user identity. Recommendations: For SAP Cloud Connector versions prior to 2.11.3, update to...

CVE-2019-0247: Improper Control of Generation of Code

SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2019-0246: Missing Authentication for Critical Function

SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity...

PT-2019-11211

Name of the Vulnerable Software and Affected Versions: SAP Cloud Connector versions prior to 2.11.3 Description: The issue allows an attacker to inject code that can be executed by the application, potentially controlling the application's behavior. Recommendations: For versions prior to 2.11.3,...

Fedora 28 : mariadb-connector-c (2018-a55f292297)

MariaDB C / C++ connector Release notes : https://mariadb.com/kb/en/library/mariadb-connector-c-307-release-note s/ Maintainer notes : Marking as a security update, beacuse of fixed resource leaks. Moving libmariadb pkgconfig file to this package from mariadb-devel. Test with MariaDB-3:10.2.19-2...

Fedora 29 : 1:mysql-connector-java (2018-6b350bb946)

Fixes CVE-2018-3258 Connector/J unspecified vulnerability CPU October 2018 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Apache Tomcat JK Connector (mod_jk) < 1.2.46 Authentication Bypass Vulnerability - Active Check

Apache Tomcat JK Connector modjk is prone to an authentication bypass vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Apache Tomcat JK Connector (mod_jk) < 1.2.46 Authentication Bypass Vulnerability - Windows

Apache Tomcat JK Connector modjk is prone to an authentication bypass vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...