Denial of Service Vulnerability in SAP Internet Graphics Server
CVE-2018-2391

6.5MEDIUM

Key Information:

Vendor

SAP
Status
Internet Graphics Server
Vendor
CVE Published:
14 February 2018

What is CVE-2018-2391?

A vulnerability exists in the SAP Internet Graphics Server (IGS) that allows a malicious user to exploit the IGS portwatcher service. This exploitation can prevent legitimate users from gaining access to the server, leading to service disruptions. The issue affects several versions of the IGS, including 7.20, 7.20EXT, 7.45, 7.49, and 7.53, and requires immediate attention to ensure uninterrupted service.

References

https://launchpad.support.sap.com/#/notes/2525222
x_refsource_CONFIRM
https://blogs.sap.com/2018/02/13/sap-security-patch-day-f...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.