CVE-2018-2428

Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cna@sap.com

Published

2018-06-12

Last modified

2024-08-05

Affected products

• Infrastructure (Sap)
• Ui (Sap)
• Sap Infrastructure (Sap Se)
• Sap Ui (Sap Se)
• Sap Ui For Sap Netweaver 7.00 (Sap Se)

References

• http://www.securityfocus.com/bid/104446
• https://launchpad.support.sap.com/#/notes/2621121
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255