CVE-2019-0379: Medium severity sap netweaver process integration vulnerability
SAP Process Integration, business-to-business add-on, versions 1.0, 2.0, does not perform authentication check properly when the default security provider is changed to BouncyCastle (BC), leading to Missing Authentication Check
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0379?
CVE-2019-0379 is rated as high severity due to the potential for unauthorized access caused by a missing authentication check.
How do I fix CVE-2019-0379?
To fix CVE-2019-0379, ensure that the default security provider remains unchanged from BouncyCastle and implement proper authentication checks.
What versions of SAP Process Integration are affected by CVE-2019-0379?
CVE-2019-0379 affects SAP Process Integration versions 1.0 and 2.0.
What could an attacker do if they exploit CVE-2019-0379?
An attacker exploiting CVE-2019-0379 could gain unauthorized access to sensitive business data.
Is there a workaround for CVE-2019-0379 until a patch is applied?
Disabling or reverting to the default security provider can serve as a temporary workaround for CVE-2019-0379.