CVE-2018-2372

概要

参考情報

• blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018 · Vendor Advisory
• launchpad.support.sap.com · Permissions Required

hana extended application services のその他の脆弱性

• CVE-2019-0364中 4.3Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate …
• CVE-2019-0363高 7.1Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload t…
• CVE-2019-0306中 4.3SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Platform users such as S…
• CVE-2019-0277中 6.5SAP HANA extended application services, version 1, advanced does not sufficiently validate an XML document accepted from an authenticated de…
• CVE-2019-0266高 7.5Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform us…