VULNERABILITY INTELLIGENCE

CVE-2019-0301

CVSS score8.8 HIGH
EPSS probability1.11%
CISA KEVNot currently listed
Published2019-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references