CVE-2019-0399

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cna@sap.com

Published

2019-12-11

Last modified

2024-08-04

Affected products

• Portfolio And Project Management (Sap)
• Sap Portfolio And Project Management Cprxrpm (Sap Se)
• Sap Portfolio And Project Management Eppm (Sap Se)
• Sap Portfolio And Project Management S4core (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2803554
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397