CVE-2019-0367 SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform necessary authorization checks for an authenticated user, allowing the import of B2B table content that l...
MediumCVSS 4.3
EPSS 0.55%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform necessary authorization checks for an authenticated user, allowing the import of B2B table content that leads to Missing Authorization Check.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap netweaver process integration | = 1.0 | No fix listed |
| sap netweaver process integration | = 2.0 | No fix listed |
| SAP_SE SAP NetWeaver Process Integration (B2B Toolkit) | = < 1.0 | No fix listed |
| SAP_SE SAP NetWeaver Process Integration (B2B Toolkit) | = < 2.0 | No fix listed |
References
- launchpad.support.sap.com permissions-required
- wiki.scn.sap.com vendor-advisory