What is CVE-2019-0341?

CVE-2019-0341 is a high-severity vulnerability in Sap Enable_now, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 8.8/10. Published 2019-08-14.

How severe is CVE-2019-0341?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Sap Enable_now

CVE-2019-0341

The session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. If an attacker runs script code in the context of the application, he could get access to the session cookie. The session cookie could then be ab…

EPSS: 0.011 (60.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sap Enable_now — versions 1902
Sap Se Enable Now — versions < 1902

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

cna@sap.com (x_refsource_MISC, Vendor Advisory)
cna@sap.com (Permissions Required, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-0341?: CVE-2019-0341 is a high-severity vulnerability in Sap Enable_now, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 8.8/10. Published 2019-08-14.
How severe is CVE-2019-0341?: High severity. CVSS v3 base score is 8.8 out of 10.