CVE-2019-0315 - Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50 and SAP_XIPCK 7.10 to 7.11, 7.20, 7.30) allows an attacker to access passwords used in FTP channels leading to information disclosure

Back Back to CVE browser

HIGH

Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50 and SAP_XIPCK 7.10 to 7.11, 7.20, 7.30) allows an attacker to access passwords used in FTP channels leading to information disclosure

Published Jun 12, 2019

7.5

HIGH

CVSS 3.0

EPSS 1.43%

Description

Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50 and SAP_XIPCK 7.10 to 7.11, 7.20, 7.30) allows an attacker to access passwords used in FTP channels leading to information disclosure.

Affected products

Vendor SAP SE Product SAP NetWeaver Process Integration(SAP XIESR) Default
n/a
- Version
  < 7.10 to 7.11
  Status
  affected
  Constraints
  -
- Version
  < 7.20
  Status
  affected
  Constraints
  -
- Version
  < 7.30
  Status
  affected
  Constraints
  -
- Version
  < 7.31
  Status
  affected
  Constraints
  -
- Version
  < 7.40
  Status
  affected
  Constraints
  -
- Version
  < 7.50
  Status
  affected
  Constraints
  -
Vendor SAP SE Product SAP NetWeaver Process Integration(SAP XIPCK) Default
n/a
- Version
  < 7.10 to 7.11
  Status
  affected
  Constraints
  -
- Version
  < 7.20
  Status
  affected
  Constraints
  -
- Version
  < 7.30
  Status
  affected
  Constraints
  -
Vendor SAP SE Product SAP NetWeaver Process Integration(SAP XITOOL) Default
n/a
- Version
  < 7.10 to 7.11
  Status
  affected
  Constraints
  -
- Version
  < 7.30
  Status
  affected
  Constraints
  -
- Version
  < 7.31
  Status
  affected
  Constraints
  -
- Version
  < 7.40
  Status
  affected
  Constraints
  -
- Version
  < 7.50
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SAP SE

SAP NetWeaver Process Integration(SAP XIESR)

n/a

Version	Status	Constraints
< 7.10 to 7.11	affected	-
< 7.20	affected	-
< 7.30	affected	-
< 7.31	affected	-
< 7.40	affected	-
< 7.50	affected	-

SAP SE

SAP NetWeaver Process Integration(SAP XIPCK)

n/a

Version	Status	Constraints
< 7.10 to 7.11	affected	-
< 7.20	affected	-
< 7.30	affected	-

SAP SE

SAP NetWeaver Process Integration(SAP XITOOL)

n/a

Version	Status	Constraints
< 7.10 to 7.11	affected	-
< 7.30	affected	-
< 7.31	affected	-
< 7.40	affected	-
< 7.50	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://launchpad.support.sap.com/#/notes/2755438
x_refsource_MISCPermissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://launchpad.support.sap.com/#/notes/2755438		x_refsource_MISCPermissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner sap

Published Jun 12, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-0315

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0315

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-0315