PT-2018-15494 · Sap · Sap Kernel

Published 2018-01-09 · Updated 2018-01-29 · CVE-2018-2360

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP KERNEL versions 7.45 through 7.52

Description The issue is related to the SAP Startup Service, which lacks an authentication check for certain functionalities that require user identity. This omission can lead to the consumption of file system storage.

Recommendations For SAP KERNEL versions 7.45 through 7.52, apply the necessary patches or updates to include authentication checks for functionalities requiring user identity.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2018-2360

Affected Products

Sap Kernel

References · 5

• https://osv.dev/vulnerability/CVE-2018-2360 · Vendor Advisory
• https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-2360 · Security Note
• http://securityfocus.com/bid/102448 · Note
• https://launchpad.support.sap.com/#/notes/2523961 · Note