Authentication flaw

2019-09-1017:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (before versions 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.

CPENameOperatorVersion
netweaver_process_integrationeq7.31
netweaver_process_integrationeq7.40
netweaver_process_integrationeq7.50

Name	Operator	Version
netweaver_process_integration	eq	7.31
netweaver_process_integration	eq	7.40
netweaver_process_integration	eq	7.50

References

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506