{"vulnerability": "cve-2019-0307", "sightings": [{"uuid": "631a7723-6617-4217-907b-368e7d016f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0307", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "ab0b41c3-f163-4184-b082-b4d7285be866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0307", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:10.000000Z"}, {"uuid": "d3c44488-44e8-41fe-badd-68703321e70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0307", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/multi/sap/smdagent_get_properties.rb", "content": "", "creation_timestamp": "2021-04-07T07:56:28.000000Z"}, {"uuid": "149b3992-bac8-495d-a4ed-9bc7b37072e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0307", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/multi/sap/smdagent_get_properties.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Yvan Genuer\", \"Vladimir Ivanov\"], \"autofilter_ports\": null, \"autofilter_services\": null, \"check\": false, \"default_credential\": false, \"description\": \"This module retrieves the `secstore.properties` file on a SMDAgent. This file contains the credentials\\n          used by the SMDAgent to connect to the SAP Solution Manager server.\", \"disclosure_date\": null, \"fullname\": \"post/multi/sap/smdagent_get_properties\", \"is_install_path\": true, \"mod_time\": \"2023-02-03 18:12:53 +0000\", \"name\": \"Diagnostics Agent in Solution Manager, stores unencrypted credentials for Solution Manager server\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/post/multi/sap/smdagent_get_properties.rb\", \"platform\": \"BSD,Linux,OSX,Unix,Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"multi/sap/smdagent_get_properties\", \"references\": [\"CVE-2019-0307\", \"URL-https://conference.hitb.org/hitblockdown002/materials/D2T1%20-%20SAP%20RCE%20-%20The%20Agent%20Who%20Spoke%20Too%20Much%20-%20Yvan%20Genuer.pdf\"], \"rport\": null, \"session_types\": [\"meterpreter\", \"shell\"], \"targets\": null, \"type\": \"post\"}", "creation_timestamp": "2026-09-08T06:52:41.455925Z"}]}