CVE-2019-0390
CVE-2019-0390
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 Nov 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.
Affected products
SAP SE · SAP Data Hub (DH_Foundation)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →