CVE-2018-2379
In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - cna@sap.com
- Published
- 2018-02-14
- Last modified
- 2024-11-14
- Weaknesses
- CWE-209
Affected products
References
- https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
- https://launchpad.support.sap.com/#/notes/2589129
