CVE-2019-0367

4.3MEDIUM

Key Information:

Vendor
SAP
Status
SAP Netweaver Process Integration (b2b Toolkit)
Vendor
CVE Published:
8 October 2019

Summary

SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform necessary authorization checks for an authenticated user, allowing the import of B2B table content that leads to Missing Authorization Check.

Affected Version(s)

SAP NetWeaver Process Integration (B2B Toolkit) < 1.0 < 1.0

SAP NetWeaver Process Integration (B2B Toolkit) < 2.0 < 2.0

References

https://launchpad.support.sap.com/#/notes/2805777
x_refsource_MISC
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.