CVE-2018-2409 Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an appli...
HighCVSS 8.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap cloud platform | = 2.0 | No fix listed |
| SAP_SE SAP Cloud Platform Connector | = 2.0 | No fix listed |
References
- 103702 third-party-advisory vdb-entry
- blogs.sap.com vendor-advisory
- launchpad.support.sap.com permissions-required