PT-2018-15508 · Sap · Sap Hana Extended Application Services

Published 2018-02-14 · Updated 2023-12-21 · CVE-2018-2375

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services version 1.0

Description A controller user with SpaceAuditor authorization in a specific space could retrieve application environments within that space.

Recommendations For SAP HANA Extended Application Services version 1.0, consider restricting the SpaceAuditor authorization to prevent unauthorized access to application environments.

Fix

Related Identifiers

CVE-2018-2375

Affected Products

Sap Hana Extended Application Services

References · 5

• https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-2375 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-2375 · Security Note
• https://t.me/cvenotify/64606 · Telegram Post
• https://launchpad.support.sap.com/#/notes/2589129 · Note