CVEvulnerability

CVE-2019-0293

6.5 MEDIUM Published 2019-05-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-862

Description

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).

Affected configurations

• sap sap solution manager system 2008 1 700 • sap sap solution manager system 2008 1 710 • sap sap solution manager system 2008 1 740

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References