CVE-2018-2404

Description

References

• securityfocus.com/bid/103727 · Third Party Advisory
• blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018 · Vendor Advisory
• launchpad.support.sap.com · Permissions Required

Más vulnerabilidades de disclosure management

• CVE-2022-41274MEDIO 6.5SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read se…
• CVE-2020-26828MEDIO 6.4SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. …
• CVE-2020-6292ALTO 8.8Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session…
• CVE-2020-6291ALTO 8.8SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authent…
• CVE-2020-6290MEDIO 6.3SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specifi…