PT-2019-10717 · Sap · Sap Financial Consolidation Cube Designer

Published 2019-01-08 · Updated 2020-08-24 · CVE-2018-2499

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Financial Consolidation Cube Designer versions prior to 8.0 and 10.1

Description A security weakness may allow an attacker to discover the password hash of an admin user.

Recommendations For versions prior to 8.0, update to version 8.0 or later. For versions prior to 10.1, update to version 10.1 or later.

Fix

Related Identifiers

CVE-2018-2499

Affected Products

Sap Financial Consolidation Cube Designer

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-2499 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-2499 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/2699233 · Vendor Advisory
• http://securityfocus.com/bid/106466 · Note