Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-2441

Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49, 7.53 and 7.73, allows an attacker to transport information which would otherwise be restricted.

Published

2018-08-14T16:29:00.553

Last Modified

2024-11-21T04:03:49.250

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 5.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

4.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap sap_kernel 7.21 Yes
Application sap sap_kernel 7.21ext Yes
Application sap sap_kernel 7.22 Yes
Application sap sap_kernel 7.22ext Yes
Application sap sap_kernel 7.45 Yes
Application sap sap_kernel 7.49 Yes
Application sap sap_kernel 7.53 Yes
Application sap sap_kernel 7.73 Yes
References