CVE-2019-0282

Published: Apr 10, 2019Modified: Nov 21, 2024

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Several web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; can be accessed without user authentication, which might expose internal data like release information, Java package and Java object names which can be misused by the attacker.

Affected (6)

Products: Sap: Netweaver Process Integration

Sap

1 product

Netweaver Process Integration

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Process Integration	Version 7.10
Sap Netweaver Process Integration	Version 7.11
Sap Netweaver Process Integration	Version 7.30
Sap Netweaver Process Integration	Version 7.31
Sap Netweaver Process Integration	Version 7.40
Sap Netweaver Process Integration	Version 7.50