SAP Netweaver Application Server Java CVE-2019-0318 Information Disclosure Vulnerability

Bugtraq ID:	109069
Class:	Input Validation Error
CVE:	CVE-2019-0318
Remote:	Yes
Local:	No
Published:	Jul 09 2019 12:00AM
Updated:	Jul 09 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

SAP Netweaver Application Server Java CVE-2019-0318 Information Disclosure Vulnerability

SAP Netweaver Application Server Java is prone to an unspecified information disclosure vulnerability.

An attacker can exploit this issue to gain sensitive information, that may aid in further attacks.

SAP Netweaver Application Server Java 7.21, 7.22, 7.45, 7.49, and 7.53 are vulnerable.

SAP Netweaver Application Server Java CVE-2019-0318 Information Disclosure Vulnerability

Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

SAP Netweaver Application Server Java CVE-2019-0318 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SAP Netweaver Application Server Java CVE-2019-0318 Information Disclosure Vulnerability

References:

• SAP Homepage (SAP)
  
• SAP Security Note 2738791 (SAP)
  
• SAP Security Patch Day �?? July 2019 (SAP)