{"id":"CVE-2019-0301","state":"PUBLISHED","title":"Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwis","description":"Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.","publishedAt":"2019-05-14T20:22:32.000Z","updatedAt":"2024-08-04T17:44:16.388Z","severity":null,"assigner":"sap","products":["SAP SE SAP Identity Management (REST Interface)"],"affected":[{"vendor":"SAP SE","product":"SAP Identity Management (REST Interface)","versions":[{"version":"< 2","status":"affected"}]}],"references":["https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032","https://launchpad.support.sap.com/#/notes/2784307"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:08.139Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/0xxx/CVE-2019-0301.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-0301","state":"PUBLISHED","datePublished":"2019-05-14T20:22:32.000Z","dateUpdated":"2024-08-04T17:44:16.388Z","assignerShortName":"sap","assignerOrgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateReserved":"2018-11-26T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing."}],"affected":[{"vendor":"SAP SE","product":"SAP Identity Management (REST Interface)","versions":[{"version":"< 2","status":"affected"}]}],"references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032","tags":["x_refsource_MISC"]},{"url":"https://launchpad.support.sap.com/#/notes/2784307","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Other","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"sap","dateUpdated":"2019-05-14T20:22:32.000Z","orgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@sap.com","ID":"CVE-2019-0301","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"SAP Identity Management (REST Interface)","version":{"version_data":[{"version_name":"<","version_value":"2"}]}}]},"vendor_name":"SAP SE"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Other"}]}]},"references":{"reference_data":[{"name":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032","refsource":"MISC","url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032"},{"name":"https://launchpad.support.sap.com/#/notes/2784307","refsource":"MISC","url":"https://launchpad.support.sap.com/#/notes/2784307"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://launchpad.support.sap.com/#/notes/2784307","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T17:44:16.388Z"}}]}}}