CVE-2018-2448

Опубликовано: 14 авг. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted.

Ссылки

http://www.securityfocus.com/bid/105077
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2653846
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
Vendor Advisory
http://www.securityfocus.com/bid/105077
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2653846
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:supplier_relationship_management_mdm_catalog:3.0:*:*:*:*:*:*:*

cpe:2.3:a:sap:supplier_relationship_management_mdm_catalog:7.01:*:*:*:*:*:*:*

cpe:2.3:a:sap:supplier_relationship_management_mdm_catalog:7.02:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00247

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-4wfj-6vjj-87rj