CVE-2018-2360

HIGH

SAP KERNEL 7.45, 7.49, 7.52 - Missing Authentication for Critical Function

Title source: llm
STIX 2.1

Description

SAP Startup Service, SAP KERNEL 7.45, 7.49, and 7.52, is missing an authentication check for functionalities that require user identity and cause consumption of file system storage.

References (3)

Core 3
Core References
Permissions Required x_refsource_confirm
https://launchpad.support.sap.com/#/notes/2523961
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/102448

Scores

CVSS v3 7.5
EPSS 0.0167
EPSS Percentile 82.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-306
Status published
Products (3)
sap/sap_kernel 7.45
sap/sap_kernel 7.49
sap/sap_kernel 7.52
Published Jan 09, 2018
Tracked Since Feb 18, 2026