CVE-2019-0346

published 2019-08-14

CVE-2019-0346: Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4.2, leads to disclosure of list…

Priority P4 32 medium 6.5 CVSS 3.0

AV N AC L PR L UI N S U C H I N A N

Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4.2, leads to disclosure of list of user names and roles imported from SAP NetWeaver BI systems, resulting in Information Disclosure.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	businessobjects_business_intelligence	—	—
sap_se	sap_business_objects_business_intelligence_platform	< 4.2	4.2

CVSS provenance

nvd v3.0 6.5 MEDIUM CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 4.0 MEDIUM AV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-319