CVE-2019-0399
N/A
N/A
Summary
SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SAP SE | SAP Portfolio and Project Management (S4CORE) | 102 | affected |
| SAP SE | SAP Portfolio and Project Management (S4CORE) | 103 | affected |
| SAP SE | SAP Portfolio and Project Management (EPPM) | 100 | affected |
| SAP SE | SAP Portfolio and Project Management (CPRXRPM) | 500_702 | affected |
| SAP SE | SAP Portfolio and Project Management (CPRXRPM) | 600_740 | affected |
| SAP SE | SAP Portfolio and Project Management (CPRXRPM) | 610_740 | affected |
Weaknesses
- Information Disclosure
ADP Enrichment
CVE Program Container
Additional References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397
- https://launchpad.support.sap.com/#/notes/2803554
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397
- https://launchpad.support.sap.com/#/notes/2803554
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.