5.5

CVE-2019-0381

EPSS 0.06%
Veröffentlicht 08.10.2019 20:15:11
Zuletzt bearbeitet 21.11.2024 04:16:46
Quelle cna@sap.com
Teams Watchlist Login
Unerledigt Login

A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the inadvertent access of files located in directories outside of the paths specified by the user.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

SAP ≫ Dynamic Tier Version1.0

SAP ≫ Dynamic Tier Version2.0

SAP ≫ Sap Iq Version16.1

SAP ≫ Sql Anywhere Version17.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.156

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-552 Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050

Vendor Advisory

https://launchpad.support.sap.com/#/notes/2792430

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2019-0381

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-0381

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-0381

EUVD