CVE-2018-2420

SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without proper file format validation.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cna@sap.com

Published

2018-05-09

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Internet Graphics Server (Sap)
• Sap Internet Graphics Server Igs (Sap Se)

References

• http://www.securityfocus.com/bid/104108
• https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/
• https://launchpad.support.sap.com/#/notes/2615635