CVE-2018-2428

5.3MEDIUM

Key Information:

Vendor
SAP
Status
SAP Infrastructure
SAP Ui
SAP Ui For SAP Netweaver 7.00
Vendor
CVE Published:
12 June 2018

Summary

Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00.

Affected Version(s)

SAP Infrastructure 1.0

SAP UI 7.4

SAP UI 7.5

References

https://launchpad.support.sap.com/#/notes/2621121
x_refsource_MISC
http://www.securityfocus.com/bid/104446
vdb-entryx_refsource_BID
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.