Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2019-0404: SAP Enable Now before 1911 reveals network settings
CVE-2019-0404 · published 6 years ago
Summary
The SAP Enable Now product versions released before 1911 include error messages that expose details about the server’s network configuration. This information could help an attacker understand how the system is set up and plan further attacks. Update to version 1911 or later, or apply the vendor’s recommended patch, to stop the messages from disclosing this data.
What to do
- Update sap enable_now to version 1911 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| sap | enable_now |
< 1911 cpe:2.3:a:sap:enable_now:*:*:*:*:*:*:*:* |
Original advisory text
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure.
SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure.
References
- https://launchpad.support.sap.com/#/notes/2845183 Permissions Required Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-209Generation of Error Message Containing Sensitive Information
Timeline
Published11 Dec 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-0404 · NVD
Track software like this
Free during beta