{"id":"CVE-2019-0293","aliases":["EUVD-2019-1066","GHSA-mfmp-hpg9-83ch"],"status":"published","title":"Read of RFC destination does not always perform necessary authorization checks, resulting in...","description":"Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01432,"percentile":0.73205,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2019-05-14T20:21:40Z","modified":"2026-06-17T02:08:08Z","products":[{"vendor":"sap","product":"sap_solution_manager_system"},{"vendor":"sap se","product":"sap solution manager system (st-pi)"}],"references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/2756625","tags":["x_refsource_MISC","x_transferred","Permissions Required","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/108324","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0293"},{"url":"https://github.com/advisories/GHSA-mfmp-hpg9-83ch"}],"sources":{"cve":[{"id":"CVE-2019-0293","description":"Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).","status":"published","published":"2019-05-14T20:21:40Z","modified":"2024-08-04T17:44:16.414Z","updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-1066","description":"Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).","status":"published","published":"2019-05-14T20:21:40Z","modified":"2024-08-04T17:44:16Z","updated_at":"2026-11-03T03:07:02.049822Z"}],"ghsa":[{"id":"GHSA-mfmp-hpg9-83ch","title":"Read of RFC destination does not always perform necessary authorization checks, resulting in...","description":"Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).","status":"published","published":"2022-05-24T16:45:38Z","modified":"2024-04-04T00:38:41Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:55:50.552757Z"}],"nvd":[{"id":"CVE-2019-0293","description":"Read of RFC destination does not always perform necessary authorization checks, resulting in escalation of privileges to access information on RFC destinations on managed systems and SAP Solution Manager system (ST-PI, before versions 2008_1_700, 2008_1_710, and 740).","status":"published","published":"2019-05-14T21:29:00.81Z","modified":"2026-06-17T02:08:08.573Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:05:13.880207Z"}]}}