CVE-2019-0338: Exposure of Sensitive Information to an Unauthorized Actor

During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure...

PT-2019-5669

Name of the Vulnerable Software and Affected Versions SAP Gateway versions 750 through 753 Description The issue is related to the improper setting of HTTP Header attributes cache-control and pragma during an OData V2/V4 request, allowing an attacker to access restricted information. This results...