PT-2019-4580
CVE-2019-0314
·
Publicado
2019-06-12
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
5.5
MédiaMétricasAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
SAP Work Manager versions 6.3 through 6.5
SAP Inventory Manager version 4.3
Description
The issue is related to inadequate access control in the SAP Work Manager and SAP Inventory Manager applications, which can be exploited to cause a denial of service. This could allow an attacker to prevent legitimate users from accessing a service by crashing or flooding it.
Recommendations
For SAP Work Manager versions 6.3 through 6.5, update to a version that addresses the access control issue.
For SAP Inventory Manager version 4.3, update to a version that addresses the access control issue.
As a temporary workaround, consider restricting access to the service to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾