VULNERABILITY INTELLIGENCE
CVE-2019-0380
CVSS score4.9 MEDIUM
EPSS probability0.88%
CISA KEVNot currently listed
Published2019-10-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Description
Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure.
Weakness classification
- CWE-532: Insertion of Sensitive Information into Log File
Primary references
- cna@sap.com — Permissions Required
- cna@sap.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory