CVE-2019-0380 - Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure

Back Back to CVE browser

MEDIUM

Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure

Published Oct 8, 2019

4.9

MEDIUM

CVSS 3.1

EPSS 0.88%

Description

Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure.

Affected products

Vendor SAP SE Product SAP Landscape Management enterprise edition Default
n/a
- Version
  < 3.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SAP SE

SAP Landscape Management enterprise edition

n/a

Version	Status	Constraints
< 3.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1153
Advisory
https://launchpad.support.sap.com/#/notes/2828682
x_refsource_MISCPermissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1153		Advisory
https://launchpad.support.sap.com/#/notes/2828682		x_refsource_MISCPermissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050		x_refsource_CONFIRMVendor Advisory