QwikSec

Security Database

CVE

CWE

Training

CVE-2019-0267

Published: Feb 15, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application.

Vendor	Product	Versions
SAP SE	SAP Manufacturing Integration and Intelligence	affected `< 15.0` affected `< 15.1` affected `< 15.2`

References

vdb-entry

x_refsource_BID

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943

x_refsource_MISC

https://launchpad.support.sap.com/#/notes/2686535

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.