CVE-2019-0293: Medium severity sap solution manager vulnerability

Published May 14, 2019

Updated

Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 20081700, 20081710, and 740).

Affected Software

3 affected components

SAP SAP Solution Manager system=2008_1_700

SAP SAP Solution Manager system=2008_1_710

SAP SAP Solution Manager system=2008_1_740

Event History

May 14, 2019

CVE Published

via MITRE·08:21 PM

Data Sourced

via MITRE·08:21 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0293?

CVE-2019-0293 is classified as a high-severity vulnerability due to the potential for privilege escalation.

How do I fix CVE-2019-0293?

To fix CVE-2019-0293, update the SAP Solution Manager system to versions 2008_1_700, 2008_1_710, or 740.

What are the potential impacts of CVE-2019-0293?

CVE-2019-0293 could allow unauthorized users to access sensitive information on RFC destinations.

Which versions of SAP Solution Manager are affected by CVE-2019-0293?

CVE-2019-0293 affects SAP Solution Manager versions 2008_1_700, 2008_1_710, and 2008_1_740.

Is there a workaround for CVE-2019-0293?

Currently, the recommended mitigation for CVE-2019-0293 is to upgrade to the latest versions as no workaround is provided.