SAP ABAP CVE-2018-2481 Remote Privilege Escalation Vulnerability

Bugtraq ID:	105906
Class:	Design Error
CVE:	CVE-2018-2481
Remote:	No
Local:	Yes
Published:	Nov 13 2018 12:00AM
Updated:	Nov 13 2018 12:00AM
Credit:	SAP
Vulnerable:	SAP NetWeaver ABAP 710 SAP NetWeaver ABAP 7.53 SAP NetWeaver ABAP 7.50 SAP NetWeaver ABAP 7.40 SAP NetWeaver ABAP 7.31 SAP NetWeaver ABAP 7.30 SAP NetWeaver ABAP 7.11 SAP NetWeaver ABAP 7.02 SAP NetWeaver ABAP 7.00
Not Vulnerable:

SAP ABAP CVE-2018-2481 Remote Privilege Escalation Vulnerability

SAP ABAP is prone to a remote privilege-escalation vulnerability.

Remote attackers can exploit this issue to gain elevated privileges.

SAP ABAP CVE-2018-2481 Remote Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SAP ABAP CVE-2018-2481 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SAP ABAP CVE-2018-2481 Remote Privilege Escalation Vulnerability

References:

• SAP Homepage (SAP)
  
• SAP Security Note 2693083 (SAP)
  
• SAP Security Patch Day �?? November 2018 (SAP)