CVE-2019-0367
N/A
N/A
Summary
SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform necessary authorization checks for an authenticated user, allowing the import of B2B table content that leads to Missing Authorization Check.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SAP SE | SAP NetWeaver Process Integration (B2B Toolkit) | < 1.0 | affected |
| SAP SE | SAP NetWeaver Process Integration (B2B Toolkit) | < 2.0 | affected |
Weaknesses
- Missing Authorization Check
ADP Enrichment
CVE Program Container
Additional References
- https://launchpad.support.sap.com/#/notes/2805777
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050
References
- https://launchpad.support.sap.com/#/notes/2805777
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.