SAP Treasury and Risk Management CVE-2019-0280 Unauthorized Access Vulnerability

Bugtraq ID:	108307
Class:	Access Validation Error
CVE:	CVE-2019-0280
Remote:	Yes
Local:	No
Published:	May 14 2019 12:00AM
Updated:	May 14 2019 12:00AM
Credit:	SAP
Vulnerable:	SAP Treasury and Risk Management 8.0 SAP Treasury and Risk Management 617 SAP Treasury and Risk Management 6.18 SAP Treasury and Risk Management 6.16 SAP Treasury and Risk Management 6.06 SAP Treasury and Risk Management 6.05 SAP Treasury and Risk Management 6.04 SAP Treasury and Risk Management 6.03 SAP Treasury and Risk Management 6.0
Not Vulnerable:

SAP Treasury and Risk Management CVE-2019-0280 Unauthorized Access Vulnerability

SAP Treasury and Risk Management is prone to an unauthorized-access vulnerability.

Attackers can exploit this issue to gain unauthorized access to the affected application. This may aid in further attacks.

SAP Treasury and Risk Management versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 617, 6.18, 8.0 are vulnerable.

SAP Treasury and Risk Management CVE-2019-0280 Unauthorized Access Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SAP Treasury and Risk Management CVE-2019-0280 Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SAP Treasury and Risk Management CVE-2019-0280 Unauthorized Access Vulnerability

References:

• SAP Homepage (SAP)
  
• SAP Security Note 2744937 (SAP)
  
• SAP Security Patch Day �?? May 2019 (SAP)