During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: sap
Published: 2019-08-14T13:49:43
Updated: 2024-08-04T17:44:16.440Z
Reserved: 2018-11-26T00:00:00
Link: CVE-2019-0338
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-08-14T14:15:16.167
Modified: 2019-08-26T14:04:12.110
Link: CVE-2019-0338
Redhat
No data.