CVE-2018-2484

Published: Jan 8, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.63_20) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected (19)

Products: Sap: Sapscore, S4core, Ea Finserv, Bank/cfm

4 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Sap Sapscore	Version 1.13
Sap Sapscore	Version 1.14
Sap Sapscore	Version 1.15

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Sap S4core	Version 1.01
Sap S4core	Version 1.02
Sap S4core	Version 1.03

Configuration C

12 vulnerable

Vulnerable Software	Affected Versions
Sap Ea Finserv	Version 1.10
Sap Ea Finserv	Version 2.0
Sap Ea Finserv	Version 5.0
Sap Ea Finserv	Version 6.03
Sap Ea Finserv	Version 6.04
Sap Ea Finserv	Version 6.05
Sap Ea Finserv	Version 6.06
Sap Ea Finserv	Version 6.0
Sap Ea Finserv	Version 6.16
Sap Ea Finserv	Version 6.17
Sap Ea Finserv	Version 6.18
Sap Ea Finserv	Version 8.0