CVE-2019-0301

Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.

Date published : 2019-05-14

https://launchpad.support.sap.com/#/notes/2784307

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032