PT-2018-15548 · Sap · Sap Internet Graphics Server

Published 2018-05-09 · Updated 2019-10-09 · CVE-2018-2421

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server (IGS) versions 7.20, 7.20EXT, 7.45, 7.49, 7.53

Description The issue allows an attacker to prevent legitimate users from accessing a service by either crashing or flooding the service.

Recommendations For versions 7.20, 7.20EXT, 7.45, 7.49, 7.53, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2018-2421

Affected Products

Sap Internet Graphics Server

References · 5

• https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-2421 · Security Note
• https://launchpad.support.sap.com/#/notes/2616599 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-2421 · Vendor Advisory
• http://securityfocus.com/bid/104111 · Note