CVE-2019-0405

SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of users, leading to a user enumeration vulnerability and Information Disclosure.

Score

CVSS 3.1 7.5 High

Status

Modified - cna@sap.com

Published

2019-12-11

Last modified

2024-08-04

Weaknesses

CWE-200

Affected products

• Enable Now (Sap)
• Sap Enable Now (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2845183
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397