CVE-2018-2499

Опубликовано: 08 янв. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8.0, 10.1) may allow an attacker to discover the password hash of an admin user.

Ссылки

http://www.securityfocus.com/bid/106466
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2699233
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
Vendor Advisory
http://www.securityfocus.com/bid/106466
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2699233
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:financial_consolidation_cube_designer:10.1:*:*:*:*:*:*:*

cpe:2.3:a:sap:financial_consolidation_cube_designer_bobj_eades:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.0043

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-ghf4-f842-9gj7