CVE-2019-0403: Command Injection
Published Dec 11, 2019
·Updated
SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection.
Affected Software
1 affected component
SAP Enable Now<1911
Event History
Dec 11, 2019
CVE Published
via MITRE·09:35 PM
Data Sourced
via MITRE·09:35 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-0403?
CVE-2019-0403 is a vulnerability in SAP Enable Now before version 1911 that allows an attacker to input commands into CSV files, which are executed when opened, leading to CSV Command Injection.
2
How severe is CVE-2019-0403?
CVE-2019-0403 has a severity rating of 9.8 (critical).
3
What software is affected by CVE-2019-0403?
SAP Enable Now before version 1911 is affected by CVE-2019-0403.
4
How can an attacker exploit CVE-2019-0403?
An attacker can exploit CVE-2019-0403 by inputting commands into CSV files, which will be executed when opened.
5
Is there a fix for CVE-2019-0403?
Yes, applying the latest version (1911 or later) of SAP Enable Now will fix CVE-2019-0403.