VULNERABILITY INTELLIGENCE

CVE-2019-0293

CVSS score6.5 MEDIUM
EPSS probability1.43%
CISA KEVNot currently listed
Published2019-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).

Weakness classification

  • CWE-862: Missing Authorization

Primary references