CVE-2018-2420

Description

References

• securityfocus.com/bid/104108 · Third Party Advisory
• blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018 · Vendor Advisory
• launchpad.support.sap.com · Permissions Required

internet graphics server의 다른 취약점

• CVE-2018-2442높음 8.8In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user…
• CVE-2018-2439보통 5.9The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request validation (for example, where the request…
• CVE-2018-2438높음 7.5The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has several denial-of-service vulnerabilities that allow an attacke…
• CVE-2018-2437심각 9.1The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions wh…
• CVE-2018-2423높음 7.5SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to prevent legitimate users fr…