CVE-2018-2428 Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51,....
MediumCVSS 5.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap infrastructure | = 1.0 | No fix listed |
| sap ui | = 2.0 | No fix listed |
| sap ui | = 7.4 | No fix listed |
| sap ui | = 7.5 | No fix listed |
| sap ui | = 7.51 | No fix listed |
| sap ui | = 7.52 | No fix listed |
| SAP_SE SAP Infrastructure | = 1.0 | No fix listed |
| SAP_SE SAP UI | = 7.4 | No fix listed |
| SAP_SE SAP UI | = 7.5 | No fix listed |
| SAP_SE SAP UI | = 7.51 | No fix listed |
| SAP_SE SAP UI | = 7.52 | No fix listed |
| SAP_SE SAP UI for SAP NetWeaver 7.00 | = 2.0 | No fix listed |
References
- 104446 third-party-advisory vdb-entry
- launchpad.support.sap.com permissions-required
- wiki.scn.sap.com vendor-advisory