CVE-2018-2360

SAP Startup Service, SAP KERNEL 7.45, 7.49, and 7.52, is missing an authentication check for functionalities that require user identity and cause consumption of file system storage.

Score

CVSS 3.0 7.5 High

Status

Modified - cna@sap.com

Published

2018-01-09

Last modified

2024-08-05

Weaknesses

CWE-306

Affected products

• Sap Kernel (Sap)
• Sap Startup Service (Sap Se)

References

• http://www.securityfocus.com/bid/102448
• https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/
• https://launchpad.support.sap.com/#/notes/2523961