Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-0399

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting informat

Description

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP Portfolio and Project Management (S4CORE)

  • 102affected
  • 103affected

SAP SE SAP Portfolio and Project Management (EPPM)

  • 100affected

SAP SE SAP Portfolio and Project Management (CPRXRPM)

  • 500_702affected
  • 600_740affected
  • 610_740affected

References