CVE-2019-0363 - Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports

Back Back to CVE browser

HIGH

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports

Published Sep 10, 2019

7.1

HIGH

CVSS 3.1

EPSS 0.90%

Description

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports.

Affected products

Vendor SAP SE Product SAP HANA Extended Application Services Default
n/a
- Version
  < 1.0.118
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SAP SE

SAP HANA Extended Application Services

n/a

Version	Status	Constraints
< 1.0.118	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1136
Advisory
https://launchpad.support.sap.com/#/notes/2817491
x_refsource_MISCPermissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1136		Advisory
https://launchpad.support.sap.com/#/notes/2817491		x_refsource_MISCPermissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506		x_refsource_CONFIRMVendor Advisory