CVE-2019-0255

CVE-2019-0255 is a vulnerability in SAP NetWeaver AS ABAP Platform, specifically affecting Krnl64nuc 7.74, krnl64UC 7.73/7.74, and Kernel 7.73/7.74/7.75. The flaw stems from improper validation of the ABAP Server system's installation type. This misconfiguration allows a business user to gain access to the full SAP Easy Access Menu, potentially leveraging privileges to business functionality. The vulnerability carries a CVSS score of 8.1 (High), indicating a significant risk. It is network-exploitable with low attack complexity and requires low privileges, but does not involve user interaction. The primary impact is high confidentiality and integrity compromise, as unauthorized access to business functions is possible. There is no evidence of active exploitation for CVE-2019-0255, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Furthermore, the vulnerability has received minimal community discussion or media coverage, suggesting a low profile in the threat landscape.