CVE-2019-0282: Medium severity sap netweaver process integration vulnerability
Several web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; can be accessed without user authentication, which might expose internal data like release information, Java package and Java object names which can be misused by the attacker.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-0282?
CVE-2019-0282 is a vulnerability in SAP NetWeaver Process Integration (Runtime Workbench) that allows unauthorized access to certain web pages.
How severe is CVE-2019-0282?
CVE-2019-0282 has a severity rating of 5.3 (medium).
Which versions of SAP NetWeaver Process Integration are affected by CVE-2019-0282?
CVE-2019-0282 affects versions 7.10, 7.11, 7.30, 7.31, 7.40, and 7.50 of SAP NetWeaver Process Integration.
What is the impact of CVE-2019-0282?
CVE-2019-0282 can expose internal data such as release information, Java package, and Java object names.
How can I fix CVE-2019-0282?
To fix CVE-2019-0282, update to a fixed version of SAP NetWeaver Process Integration.