5.3
CVE-2018-2448
- EPSS 1.36%
- Veröffentlicht 14.08.2018 16:29:01
- Zuletzt bearbeitet 21.11.2024 04:03:49
- Quelle cna@sap.com
- CVE-Watchlists
- Unerledigt
LoginUnder certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Supplier Relationship Management Mdm Catalog Version3.0
SAP ≫ Supplier Relationship Management Mdm Catalog Version7.01
SAP ≫ Supplier Relationship Management Mdm Catalog Version7.02
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.36% | 0.68 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
http://www.securityfocus.com/bid/105077
https://launchpad.support.sap.com/#/notes/2653846