CVE-2019-0267

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence versions 15.0 through 15.2

Description The issue is related to the lack of Anti-XSRF tokens in the Illuminator Servlet, which could lead to cross-site request forgery (XSRF) attacks if data is posted to the Servlet from an external application. This might allow a remote attacker to gain access to the vulnerable application.

Recommendations For versions 15.0 through 15.2, consider implementing Anti-XSRF tokens in the Illuminator Servlet to prevent XSRF attacks. As a temporary workaround, restrict access to the Illuminator Servlet to minimize the risk of exploitation.