CVE-2019-0391

Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cna@sap.com

Published

2019-11-13

Last modified

2024-08-04

Affected products

• Netweaver Application Server Java (Sap)
• Sap Netweaver As Java (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2835226
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390