VulnerabilityModified
CVE-2018-2417
Under certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an attacker to access information which would otherwise be restricted.
MEDIUM 5.3EPSS 1.34%
Does this matter?
Lower severity and a low EPSS score (1.34%). Track it; it rarely justifies an emergency change on its own.
Description
Under certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an attacker to access information which would otherwise be restricted.
- CVSS 3.0
- 5.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 1.34% probability · 70th percentile
- CISA KEV
- Not listed
- Affected
- sap/identity management
- Source
- cna@sap.com
References
- http://www.securityfocus.com/bid/104112Third Party Advisory, VDB Entry
- https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2601492Permissions Required, Vendor Advisory
- http://www.securityfocus.com/bid/104112Third Party Advisory, VDB Entry
- https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2601492Permissions Required, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.