High severity · published Jul 10, 2019
CVE-2019-0319
The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message
7.5
CVSS
2.5%
EPSS
No
On KEV
Description
The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GA
Gateway · Sap
7.5; 7.51; 7.52; 7.53 · source: NVD
UI
Ui5 · Sap
1.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-0319
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-0319
Exploit
http://packetstormsecurity.com/files/153661/SAPUI5-1.0.0-SAP-Gateway-7.5-7.51-7.52-7.53-Content-Spoofing.html
Third Party Advisory
http://www.securityfocus.com/bid/109074
Third Party Advisory
https://cxsecurity.com/ascii/WLB-2019050283
Exploit
https://drive.google.com/open?id=1aGFqggvydehSK7MFIsfKW7tO60yiF55f
Permissions Required
https://launchpad.support.sap.com/#/notes/2752614
launchpad.support.sap.com
https://launchpad.support.sap.com/#/notes/2911267
More from Gateway
5.3
CVE-2019-0338
During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to…