CVE-2018-2428

Опубликовано: 12 июн. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00.

Ссылки

http://www.securityfocus.com/bid/104446
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2621121
Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255
Vendor Advisory
http://www.securityfocus.com/bid/104446
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2621121
Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:infrastructure:1.0:*:*:*:*:*:*:*

cpe:2.3:a:sap:ui:2.0:*:*:*:*:netweaver_7.0:*:*

cpe:2.3:a:sap:ui:7.4:*:*:*:*:*:*:*

cpe:2.3:a:sap:ui:7.5:*:*:*:*:*:*:*

cpe:2.3:a:sap:ui:7.51:*:*:*:*:*:*:*

cpe:2.3:a:sap:ui:7.52:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00213

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-mw4m-pqh2-36x9