PT-2019-4580

CVE-2019-0314

·

Published

2019-06-12

·

Updated

2020-08-24

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions SAP Work Manager versions 6.3 through 6.5 SAP Inventory Manager version 4.3
Description The issue is related to inadequate access control in the SAP Work Manager and SAP Inventory Manager applications, which can be exploited to cause a denial of service. This could allow an attacker to prevent legitimate users from accessing a service by crashing or flooding it.
Recommendations For SAP Work Manager versions 6.3 through 6.5, update to a version that addresses the access control issue. For SAP Inventory Manager version 4.3, update to a version that addresses the access control issue. As a temporary workaround, consider restricting access to the service to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾