EUVD-2018-14295

Malware in sbrugna...

CVE-2019-0381

A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the inadvertent access of files located in directories outside of the paths specified by the user...

CVE-2019-0381

A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the inadvertent access of files located in directories outside of the paths specified by the user...

Design/Logic Flaw

A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the inadvertent access of files located in directories outside of the paths specified by the user...

CVE-2019-0381

CVE-2019-0381 describes a binary planting vulnerability in SAP SQL Anywhere (before 17.0), SAP IQ (before 16.1), and SAP Dynamic Tiering (before 1.0/2.0) that can cause inadvertent access to files outside the user-specified directories. The issue is triggered via local access and stems from how c...

CVE-2019-0381: Files or Directories Accessible to External Parties

A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the inadvertent access of files located in directories outside of the paths specified by the user...

PT-2019-4302

Name of the Vulnerable Software and Affected Versions SAP SQL Anywhere versions prior to 17.0 SAP IQ versions prior to 16.1 SAP Dynamic Tiering versions prior to 1.0 and 2.0 Description The issue is related to insufficient protection of registration data in SAP SQL Anywhere, SAP IQ, and SAP Dynam...

Multiple SAP Products CVE-2019-0381 DLL Loading Local Privilege Escalation Vulnerability

Description Multiple SAP Products are prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. The following SAP products are affected: SAP IQ version 16.1 is vulnerable SAP SQL Anywhere version 17.0 is vulnerable SAP Dynamic Tierin...

CVE-2018-2440

Under certain circumstances SAP Dynamic Authorization Management DAM by NextLabs Java Policy Controller versions 7.7 and 8.5 exposes sensitive information in the application logs...

Authorization

Under certain circumstances SAP Dynamic Authorization Management DAM by NextLabs Java Policy Controller versions 7.7 and 8.5 exposes sensitive information in the application logs...

PT-2018-15564

Name of the Vulnerable Software and Affected Versions SAP Dynamic Authorization Management DAM by NextLabs versions 7.7 through 8.5 Description The issue exposes sensitive information in the application logs under certain circumstances. Recommendations For versions 7.7 through 8.5, consider...

CVE-2018-2440: Insertion of Sensitive Information into Log File

Under certain circumstances SAP Dynamic Authorization Management DAM by NextLabs Java Policy Controller versions 7.7 and 8.5 exposes sensitive information in the application logs...