CVE-2019-0389

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java versions prior to 7.1 SAP NetWeaver Application Server Java versions prior to 7.2 SAP NetWeaver Application Server Java versions prior to 7.3 SAP NetWeaver Application Server Java versions prior to 7.31 SAP NetWeaver Application Server Java versions prior to 7.4 SAP NetWeaver Application Server Java versions prior to 7.5

Description The issue is related to insecure privilege management in the SAP NetWeaver Application Server Java. Exploitation of this issue could allow a remote attacker to elevate their privileges. An administrator of the SAP NetWeaver Application Server Java may change privileges for all or some functions in the Java Server, enabling users to execute functions they are not otherwise allowed to execute.

Recommendations For versions prior to 7.1, update to version 7.1 or later. For versions prior to 7.2, update to version 7.2 or later. For versions prior to 7.3, update to version 7.3 or later. For versions prior to 7.31, update to version 7.31 or later. For versions prior to 7.4, update to version 7.4 or later. For versions prior to 7.5, update to version 7.5 or later.