CVE-2018-2404

概要

参考情報

• securityfocus.com/bid/103727 · Third Party Advisory
• blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018 · Vendor Advisory
• launchpad.support.sap.com · Permissions Required

disclosure management のその他の脆弱性

• CVE-2022-41274中 6.5SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read se…
• CVE-2020-26828中 6.4SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. …
• CVE-2020-6292高 8.8Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session…
• CVE-2020-6291高 8.8SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authent…
• CVE-2020-6290中 6.3SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specifi…