CVE-2019-0346 — Cleartext Transmission of Sensitive Info in SE SAP Business Objects Business Intelligence Platform

CWE-319 — Cleartext Transmission of Sensitive Info3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 61.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Business Objects Business Intelligence PlatformSAP Businessobjects Business Intelligence
Timeline
PublishedAug 14
Latest updateMay 24

Description

Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4.2, leads to disclosure of list of user names and roles imported from SAP NetWeaver BI systems, resulting in Information Disclosure.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-jf2g-m3v4-pwjf: Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4↗2022-05-24
▶
CVEList
CVE-2019-0346: Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4↗2019-08-14
▶
CVE-2019-0346 — MEDIUM severity | cvebase