CVE-2019-0315

published 2019-06-12

CVE-2019-0315: Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C H I N A N

Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50 and SAP_XIPCK 7.10 to 7.11, 7.20, 7.30) allows an attacker to access passwords used in FTP channels leading to information disclosure.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap	netweaver_process_integration	—	—
sap_se	sap_netweaver_process_integration	< 7.10 to 7.11	7.10 to 7.11
sap_se	sap_netweaver_process_integration	< 7.20	7.20
sap_se	sap_netweaver_process_integration	< 7.30	7.30
sap_se	sap_netweaver_process_integration	< 7.31	7.31
sap_se	sap_netweaver_process_integration	< 7.40	7.40
sap_se	sap_netweaver_process_integration	< 7.50	7.50