Privilege Escalation in SAP Disclosure Management
CVE-2019-0258
8.8HIGH
Summary
The vulnerability in SAP Disclosure Management version 10.01 arises from insufficient authorization checks for authenticated users, potentially allowing an attacker to escalate their privileges and gain unauthorized access to sensitive data and functionalities within the application. This lack of proper validation could lead to severe implications, including data manipulation or exposure. Organizations using this version should prioritize remediation to safeguard against potential exploitation.
Affected Version(s)
SAP Disclosure Management < 10.01
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved