CVE-2019-0307: Missing Encryption of Sensitive Data

Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to t...

PT-2019-4579

Name of the Vulnerable Software and Affected Versions SAP Solution Manager version 7.2 Description The issue concerns the Diagnostics Agent in SAP Solution Manager, which stores credentials such as SLD user connection and Solman user communication in the SAP Secure Storage file without encryption...

CVE-2019-0291

Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted...

CVE-2019-0293

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system ST-PI, before versions 20081700, 20081710, and 740...

Authentication flaw

Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted...

CVE-2019-0291

Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted...

CVE-2019-0293

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system ST-PI, before versions 20081700, 20081710, and 740...

Authorization

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system ST-PI, before versions 20081700, 20081710, and 740...

CVE-2019-0293

CVE-2019-0293 concerns the SAP ST-PI component where a read of an RFC destination may skip necessary authorization checks, enabling a local escalation of privileges to view information on RFC destinations on managed systems and SAP Solution Manager. Affected are ST-PI versions prior to 2008_1_700...

CVE-2019-0293

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system ST-PI, before versions 20081700, 20081710, and 740...

CVE-2019-0291

Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted...

CVE-2019-0291

Technical details for CVE-2019-0291 are not publicly available in the provided documents. Monitor for updates; no specifics on affected products, impact, or fixes are provided.

PT-2019-11222

Name of the Vulnerable Software and Affected Versions: SAP Solution Manager system ST-PI versions prior to 2008 1 700 SAP Solution Manager system ST-PI versions prior to 2008 1 710 SAP Solution Manager system ST-PI version prior to 740 Description: The issue is related to the read of RFC...

PT-2019-11221

Name of the Vulnerable Software and Affected Versions: Solution Manager version 7.2 Description: The issue allows an attacker to access restricted information under certain conditions. Recommendations: For version 7.2, at the moment, there is no information about a newer version that contains a f...

CVE-2019-0293: Missing Authorization

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system ST-PI, before versions 20081700, 20081710, and 740...

CVE-2019-0291: Undefined Security Weakness

Under certain conditions Solution Manager, version 7.2, allows an attacker to access information which would otherwise be restricted...

SAP Solution Manager Incident Management Work Center Cross-Site Scripting Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

CVE-2018-2405

SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting...

CVE-2018-2405

SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting...

Cross site scripting

SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting...