Information Disclosure Vulnerability in SAP Landscape Management by SAP
CVE-2019-0380

4.9MEDIUM

Key Information:

Vendor
SAP
Status
SAP Landscape Management Enterprise Edition
Vendor
CVE Published:
8 October 2019

Summary

An information disclosure vulnerability exists in SAP Landscape Management enterprise edition prior to version 3.0. This vulnerability may allow default values of custom secure parameters to be exposed in application logs under specific conditions, potentially leading to the unintended disclosure of sensitive information.

Affected Version(s)

SAP Landscape Management enterprise edition < 3.0

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_CONFIRM
https://launchpad.support.sap.com/#/notes/2828682
x_refsource_MISC

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.