CVE-2018-2440
Under certain circumstances SAP Dynamic Authorization Management (DAM) by NextLabs (Java Policy Controller versions 7.7 and 8.5) exposes sensitive information in the application logs.
- Score
- CVSS 3.0 4.4 Medium
- Status
- Modified - cna@sap.com
- Published
- 2018-07-10
- Last modified
- 2024-08-05
- Weaknesses
- CWE-532
Affected products
- Dynamic Authorization Management (Sap)
- Sap Dynamic Authorization Management Dam By Nextlabs Java Policy Controller Versions (Sap)
References
- https://launchpad.support.sap.com/#/notes/2664767
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
