Vulnerability in SAP Dynamic Tier
CVE-2019-0381
A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the inadvertent access of files located in directories outside of the paths specified by the user.
EPSS: 0.003 (23.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Sap Dynamic_tier — versions 1.0, 2.0
- Sap Sap_iq — versions 16.1
- Sap Sql_anywhere — versions 17.0
- Sap Se Dynamic Tiering — versions < 1.0, < 2.0
- Sap Se Iq — versions < 16.1
- Sap Se Sql Anywhere — versions < 17.0
Weakness classification (CWE)
References
- cna@sap.com (x_refsource_CONFIRM, Vendor Advisory)
- cna@sap.com (Permissions Required, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-0381?
- CVE-2019-0381 is a medium-severity vulnerability in SAP Dynamic Tier, classified under Files or Directories Accessible to External Parties. CVSS score: 5.5/10. Published 2019-10-08.
- How severe is CVE-2019-0381?
- Medium severity. CVSS v3 base score is 5.5 out of 10.