CVEvulnerability
CVE-2019-0380
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-10-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-532
Description
Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure.
Affected configurations
• sap landscape management 3.0
Related
Weakness · CWE (1)
- CWE-532 Insertion of Sensitive Information into Log File weakness
References
- https://launchpad.support.sap.com/#/notes/2828682 Permissions Required
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2828682 Permissions Required
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050 Vendor Advisory