CVE-2019-0345

A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java Administrator System Overview, versions 7.30, 7.31, 7.40, 7.50, by sending a specially crafted XML file and trick the application server into leaking authentication credentials for its own SAP...

CVE-2019-0345

CVE-2019-0345 affects SAP NetWeaver Application Server for Java (Administrator System Overview) in versions 7.30, 7.31, 7.40, and 7.50. A remote unauthenticated attacker can send a specially crafted XML file to the web service and induce a Server-Side Request Forgery that leaks authentication cre...

CVE-2019-0345

A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java Administrator System Overview, versions 7.30, 7.31, 7.40, 7.50, by sending a specially crafted XML file and trick the application server into leaking authentication credentials for its own SAP...