1. Home
  2. CVE Database
  3. CVE-2019-0301
HIGH · 8.8

CVE-2019-0301

Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only...

Vulnerability Description

Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SapIdentity Management2.0

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2019-0301?

CVE-2019-0301 is a vulnerability with a CVSS score of 8.8 (HIGH). Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only...

How severe is CVE-2019-0301?

CVE-2019-0301 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-0301?

Check the references section above for vendor advisories and patch information. Affected products include: Sap Identity Management.