NetSight
medium6.5

CVE-2019-0399

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discove…

Impact

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.

Affected products

VendorProductAffected versions
SapPortfolio And Project Management
Versions cprxrpm_500_702, cprxrpm_600_740, cprxrpm_610_740, eppm_100, s4core_102, s4core_103

References