CVE-2018-2441 - Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 3

CVE-2018-2441

Summary

Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49, 7.53 and 7.73, allows an attacker to transport information which would otherwise be restricted.

References

Vulnerable Configurations

cpe:2.3:a:sap:sap_kernel:7.21:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.21:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.21ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.21ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.22:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.22:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.22ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.22ext:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.45:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.45:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.49:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.49:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.53:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.53:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.73:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_kernel:7.73:*:*:*:*:*:*:*

CVSS

Base:	5.5 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:S/C:P/I:P/A:N

refmap via4

bid	105090
confirm	https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
misc	https://launchpad.support.sap.com/#/notes/2671160

Last major update

24-08-2020 - 17:37

Published

14-08-2018 - 16:29

Last modified

24-08-2020 - 17:37