CVE-2018-2448

Published: Aug 14, 2018Modified: Nov 21, 2024

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted.

Affected (3)

Products: Sap: Supplier Relationship Management Mdm Catalog

Sap

1 product

Supplier Relationship Management Mdm Catalog

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Sap Supplier Relationship Management Mdm Catalog	Version 3.0
Sap Supplier Relationship Management Mdm Catalog	Version 7.01
Sap Supplier Relationship Management Mdm Catalog	Version 7.02