PT-2018-15501 · Sap · Sap Netweaver System Landscape Directory

Published 2018-03-01 · Updated 2018-03-23 · CVE-2018-2368

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP NetWeaver System Landscape Directory, LM-CORE versions 7.10 through 7.40

Description The issue concerns the lack of authentication checks for certain functionalities that require user identity, potentially allowing unauthorized access.

Recommendations For versions 7.10 through 7.40, apply the necessary patches or updates to ensure proper authentication checks are in place for all functionalities requiring user identity.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2018-2368

Affected Products

Sap Netweaver System Landscape Directory

References · 5

• https://osv.dev/vulnerability/CVE-2018-2368 · Vendor Advisory
• https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-2368 · Security Note
• https://launchpad.support.sap.com/#/notes/2565622 · Note
• http://securityfocus.com/bid/103000 · Note