CVE-2018-2416

Description

References

• securityfocus.com/bid/104106 · Third Party Advisory
• securityfocus.com/bid/105076 · Third Party Advisory
• blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018 · Vendor Advisory
• launchpad.support.sap.com · Permissions Required
• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Third Party Advisory

identity management 的其他漏洞

• CVE-2020-6258中危 6.5SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to vi…
• CVE-2019-0301高危 8.8Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST I…
• CVE-2018-2417中危 5.3Under certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an attacker to access information which would otherw…