CVE-2019-0306
SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Platform users such as SpaceAuditors to execute requests to obtain a complete list of SAP HANA user IDs and names.
- Score
- CVSS 3.0 4.3 Medium
- Status
- Modified - cna@sap.com
- Published
- 2019-06-12
- Last modified
- 2024-08-04
Affected products
- Hana Extended Application Services (Sap)
- Sap Hana Extended Application Services Advanced Model (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/2771128
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242
