CVE-2019-0312

Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or other technical data in the absence of restrictive firewall and port settings.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cna@sap.com

Published

2019-06-12

Last modified

2024-08-04

Weaknesses

CWE-306

Affected products

• Netweaver Process Integration (Sap)
• Sap Netweaver Process Integrationsap Xiesr (Sap Se)
• Sap Netweaver Process Integrationsap Xitool (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2744086
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242