PT-2018-15584 · Sap · Sap Adaptive Server Enterprise

Published 2018-10-09 · Updated 2020-08-24 · CVE-2018-2468

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise (ASE) versions 15.7 through 16.0

Description The backup server in SAP Adaptive Server Enterprise (ASE) has an issue that allows an attacker to access restricted information under certain conditions.

Recommendations For versions 15.7 through 16.0, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2018-2468

Affected Products

Sap Adaptive Server Enterprise

References · 5

• https://launchpad.support.sap.com/#/notes/2678615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-2468 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-2468 · Vendor Advisory
• http://securityfocus.com/bid/105527 · Note