CVE-2018-2368
SAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform any authentication checks for functionalities that require user identity.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cna@sap.com
- Published
- 2018-03-01
- Last modified
- 2024-08-05
- Weaknesses
- CWE-306
Affected products
- Netweaver System Landscape Directory (Sap)
- Lm-core (Sap Se)
- Sap Netweaver System Landscape Directory (Sap Se)
References
- http://www.securityfocus.com/bid/103000
- https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
- https://launchpad.support.sap.com/#/notes/2565622
