CVE-2018-2417

Description

References

• securityfocus.com/bid/104112 · Third Party Advisory
• blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018 · Vendor Advisory
• launchpad.support.sap.com · Permissions Required

identity management 的其他漏洞

• CVE-2020-6258中危 6.5SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to vi…
• CVE-2019-0301高危 8.8Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST I…
• CVE-2018-2416中危 5.4SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source.