PT-2018-15510 · Sap · Sap Hana Extended Application Services

Published 2018-02-14 · Updated 2023-12-21 · CVE-2018-2377

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services version 1.0

Description The issue allows unauthorized users to retrieve some general server statistics and status information.

Recommendations For SAP HANA Extended Application Services version 1.0, consider restricting access to sensitive server information until a patch is available.

Fix

Related Identifiers

CVE-2018-2377

Affected Products

Sap Hana Extended Application Services

References · 5

• https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-2377 · Security Note
• https://osv.dev/vulnerability/CVE-2018-2377 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/2589129 · Note
• https://t.me/cvenotify/64608 · Telegram Post