CVEvulnerability
CVE-2018-2360
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-01-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-306
Description
SAP Startup Service, SAP KERNEL 7.45, 7.49, and 7.52, is missing an authentication check for functionalities that require user identity and cause consumption of file system storage.
Affected configurations
• sap sap kernel 7.45
• sap sap kernel 7.49
• sap sap kernel 7.52
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- http://www.securityfocus.com/bid/102448 Third Party Advisory, VDB Entry
- https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/ Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2523961 Permissions Required
- http://www.securityfocus.com/bid/102448 Third Party Advisory, VDB Entry
- https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/ Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2523961 Permissions Required