CVE-2018-2448

Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cna@sap.com

Published

2018-08-14

Last modified

2024-08-05

Affected products

• Sap Srm-mdm Catalog (Sap)
• Supplier Relationship Management Mdm Catalog (Sap)

References

• http://www.securityfocus.com/bid/105077
• https://launchpad.support.sap.com/#/notes/2653846
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742