CVE-2019-0363

HIGH

7.1

Description

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports.

Details CVE

Score CVSS v3.17.1

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie9/10/2019

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

sap:hana_extended_application_services

References

https://launchpad.support.sap.com/#/notes/2817491(cna@sap.com)

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506(cna@sap.com)

https://launchpad.support.sap.com/#/notes/2817491(af854a3a-2127-422b-91ae-364da2661108)

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.