description: Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00.
problem types: Information Disclosure
affected:
{
product: SAP Infrastructure
vendor: SAP SE
versions:
status: affected, version: 1.0
}
{
product: SAP UI
vendor: SAP SE
versions:
status: affected, version: 7.4
status: affected, version: 7.5
status: affected, version: 7.51
status: affected, version: 7.52
}
{
product: SAP UI for SAP NetWeaver 7.00
vendor: SAP SE
versions:
status: affected, version: 2.0
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.0
]