CVE-2018-2440

MEDIO 4.4CVE-2018-2440 · Published 10/07/2018 · updated 17/06/2026

In breve

CVE-2018-2440 è una vulnerabilità MEDIO (CVSS 4.4) che riguarda dynamic authorization management (sap).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.33%, superiore al 26.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dynamic authorization management sap	`= 7.7= 8.5`	No fix yet

Description

Under certain circumstances SAP Dynamic Authorization Management (DAM) by NextLabs (Java Policy Controller versions 7.7 and 8.5) exposes sensitive information in the application logs.

References

launchpad.support.sap.com · Permissions Required
wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free