CVE-2018-2360 SAP Startup Service, SAP KERNEL 7.45, 7.49, and 7.52, is missing an authentication check for functionalities that require user identity and cause consumption of file system storage.
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAP Startup Service, SAP KERNEL 7.45, 7.49, and 7.52, is missing an authentication check for functionalities that require user identity and cause consumption of file system storage.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap kernel | = 7.45 | No fix listed |
| sap kernel | = 7.49 | No fix listed |
| sap kernel | = 7.52 | No fix listed |
| SAP_SE SAP Startup Service | = 7.45 | No fix listed |
| SAP_SE SAP Startup Service | = 7.49 | No fix listed |
| SAP_SE SAP Startup Service | = 7.52 | No fix listed |
References
- 102448 third-party-advisory vdb-entry
- blogs.sap.com vendor-advisory
- launchpad.support.sap.com permissions-required