2 lines
3.7 KiB
JSON
2 lines
3.7 KiB
JSON
{"affected":[{"affectedData":[{"product":"SAP NetWeaver Application Server for Java (Startup Framework)","vendor":"SAP SE","versions":[{"status":"affected","version":"< 7.21"},{"status":"affected","version":"< 7.22"},{"status":"affected","version":"< 7.45"},{"status":"affected","version":"< 7.49"},{"status":"affected","version":"< 7.53"}]}],"source":"cna@sap.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:sap:netweaver_application_server_java:7.21:*:*:*:*:*:*:*","matchCriteriaId":"852F9750-8F1A-4592-BE4B-7CBBDE42082E","vulnerable":true},{"criteria":"cpe:2.3:a:sap:netweaver_application_server_java:7.22:*:*:*:*:*:*:*","matchCriteriaId":"0C50443A-8C3D-46D3-8FF7-A4CFC2C0C184","vulnerable":true},{"criteria":"cpe:2.3:a:sap:netweaver_application_server_java:7.45:*:*:*:*:*:*:*","matchCriteriaId":"86DFF2A2-30BF-41D6-BDBB-AAF2E1750836","vulnerable":true},{"criteria":"cpe:2.3:a:sap:netweaver_application_server_java:7.49:*:*:*:*:*:*:*","matchCriteriaId":"CA667A93-ADC5-4B46-8CE0-6AC3535B0BC1","vulnerable":true},{"criteria":"cpe:2.3:a:sap:netweaver_application_server_java:7.53:*:*:*:*:*:*:*","matchCriteriaId":"C31830DA-EA34-46F7-9CE5-4BFEAD7B19D2","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted."},{"lang":"es","value":"Bajo ciertas condiciones SAP NetWeaver Application Server para Java (Framework Startup), versiones 7.21, 7.22, 7.45, 7.49 y 7.53, permite a un atacante acceder a información que de otra manera estaría restringida."}],"id":"CVE-2019-0318","lastModified":"2026-06-17T02:08:10.193","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":3.5,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":6.8,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":1.6,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-07-10T19:15:10.143","references":[{"source":"cna@sap.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/109069"},{"source":"cna@sap.com","tags":["Permissions Required","Vendor Advisory"],"url":"https://launchpad.support.sap.com/#/notes/2738791"},{"source":"cna@sap.com","tags":["Vendor Advisory"],"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/109069"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"],"url":"https://launchpad.support.sap.com/#/notes/2738791"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575"}],"sourceIdentifier":"cna@sap.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|