2 lines
3.4 KiB
JSON
2 lines
3.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"SAP HANA Extended Application Services","vendor":"SAP SE","versions":[{"status":"affected","version":"< 1.0.97 to 1.0.99 (running on SAP HANA 1 or SAP HANA 2 SPS0 (second S stands for stack)"}]}],"source":"cna@sap.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:sap:landscape_management:3.0:*:*:*:*:*:*:*","matchCriteriaId":"05AF07FF-FC25-4DCD-978A-6C60C84A69F7","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks properly for XS advanced platform and business users. Fixed in 1.0.97 to 1.0.99 (running on SAP HANA 1 or SAP HANA 2 SPS0 (second S stands for stack))."},{"lang":"es","value":"En determinadas circunstancias, SAP HANA Extended Application Services, en el modelo avanzado (XS advanced) no realiza las comprobaciones de autenticación correctamente para la plataforma XS advanced y los usuarios de negocio. Se ha solucionado en las versiones desde la 1.0.97 hasta la 1.0.99 (ejecutándose en SAP HANA 1 o SAP HANA 2 SPS0; la segunda \"s\" significa \"stack\" [pila])."}],"id":"CVE-2019-0261","lastModified":"2026-06-17T02:08:05.613","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-02-15T18:29:01.587","references":[{"source":"cna@sap.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/106986"},{"source":"cna@sap.com","tags":["Permissions Required","Vendor Advisory"],"url":"https://launchpad.support.sap.com/#/notes/2742027"},{"source":"cna@sap.com","tags":["Vendor Advisory"],"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/106986"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"],"url":"https://launchpad.support.sap.com/#/notes/2742027"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943"}],"sourceIdentifier":"cna@sap.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"nvd@nist.gov","type":"Primary"}]}
|