ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-0255

—
CVSS 3.0
8.1 high
EPSS
2%p75
Published
()
Modified
Description

SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The situation can be misused by any user to leverage privileges to business functionality.

Vendors
sap
Products
advanced business application programming platform kernel, advanced business application programming platform krnl64nuc, advanced business application programming platform krnl64uc
Weakness
CWE-20
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news

No ingested article mentions this CVE yet.