CVE-2019-0307 Hardcoded credentials in SAP Solution Manager(Diagnostics Agent)
An attacker with admin privileges can decode unencrypted credentials in SAP Solution Manager's Diagnostics Agent to access configuration data.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-0307?
CVE-2019-0307 is a low-severity vulnerability in SAP Solution Manager(Diagnostics Agent), published on 12 Jun 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to the entire configuration, but no system sensitive information can be gained.
Weakness: CWE-311
Which versions are affected by CVE-2019-0307?
It affects 1 product.
Products include Sap Solution Manager.
How do I fix CVE-2019-0307?
No fix has been published for CVE-2019-0307 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-0307 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-0307 exists.
Public exploit code: 1 Metasploit module.
Other vulnerabilities in SAP Solution Manager(Diagnostics Agent)
- CVE-2020-6207 SAP Solution Manager Missing Authentication for Critical Function
- CVE-2020-26821 Missing authorization in SAP Solution Manager (JAVA stack)
- CVE-2020-26822 Missing authorization in SAP Solution Manager (JAVA stack)
- CVE-2020-26823 Missing authorization in SAP Solution Manager (JAVA stack)
- CVE-2020-26824 Missing authorization in SAP Solution Manager (JAVA stack)
Sources
Also known as GHSA-cf98-qgqh-wq9x.