CVE-2018-2404

Mô tả

Tham khảo

• securityfocus.com/bid/103727 · Third Party Advisory
• blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018 · Vendor Advisory
• launchpad.support.sap.com · Permissions Required

Lỗ hổng khác của disclosure management

• CVE-2022-41274TRUNG BÌNH 6.5SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read se…
• CVE-2020-26828TRUNG BÌNH 6.4SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. …
• CVE-2020-6292CAO 8.8Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session…
• CVE-2020-6291CAO 8.8SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authent…
• CVE-2020-6290TRUNG BÌNH 6.3SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specifi…