PT-2018-15494 · Sap · Sap Kernel

Publicado 2018-01-09 · Atualizado 2018-01-29 · CVE-2018-2360

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP KERNEL versions 7.45 through 7.52

Description The issue is related to the SAP Startup Service, which lacks an authentication check for certain functionalities that require user identity. This omission can lead to the consumption of file system storage.

Recommendations For SAP KERNEL versions 7.45 through 7.52, apply the necessary patches or updates to include authentication checks for functionalities requiring user identity.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2018-2360

Produtos afetados

Sap Kernel

Referências · 5

• http://securityfocus.com/bid/102448 · Nota
• https://osv.dev/vulnerability/CVE-2018-2360 · Aviso do Fabricante
• https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018 · Aviso do Fabricante
• https://launchpad.support.sap.com/#/notes/2523961 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-2360 · Nota de Segurança