SAP Enterprise Financial Services CVE-2018-2484 Remote Authorization Bypass Vulnerability
BID:106477
CVE-2018-2484 |Info
SAP Enterprise Financial Services CVE-2018-2484 Remote Authorization Bypass Vulnerability
| Bugtraq ID: | 106477 |
| Class: | Design Error |
| CVE: |
CVE-2018-2484 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 08 2019 12:00AM |
| Updated: | Jun 11 2019 02:00PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
SAP SAPSCORE 1.15 SAP SAPSCORE 1.14 SAP SAPSCORE 1.13 SAP S4CORE 1.03 SAP S4CORE 1.02 SAP S4CORE 1.01 SAP Enterprise Financial Services 0 SAP EA-FINSERV 8.0 SAP EA-FINSERV 6.18 SAP EA-FINSERV 6.17 SAP EA-FINSERV 6.16 SAP EA-FINSERV 6.06 SAP EA-FINSERV 6.05 SAP EA-FINSERV 6.04 SAP EA-FINSERV 6.03 SAP EA-FINSERV 6.0 SAP EA-FINSERV 5.0 SAP EA-FINSERV 2.0 SAP EA-FINSERV 1.10 SAP Bank/CFM 4.63_20 |
| Not Vulnerable: | |
Discussion
SAP Enterprise Financial Services CVE-2018-2484 Remote Authorization Bypass Vulnerability
SAP Enterprise Financial Services is prone to an authorization-bypass vulnerability.
Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks.
The following versions of product are vulnerable:
SAP Enterprise Financial Services
SAP SAPSCORE 1.13, 1.14 and 1.15
SAP S4CORE 1.01, 1.02 and 1.03
SAP EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0
SAP Bank/CFM 4.63_20
SAP Enterprise Financial Services is prone to an authorization-bypass vulnerability.
Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks.
The following versions of product are vulnerable:
SAP Enterprise Financial Services
SAP SAPSCORE 1.13, 1.14 and 1.15
SAP S4CORE 1.01, 1.02 and 1.03
SAP EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0
SAP Bank/CFM 4.63_20
Exploit / POC
SAP Enterprise Financial Services CVE-2018-2484 Remote Authorization Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
SAP Enterprise Financial Services CVE-2018-2484 Remote Authorization Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
SAP Enterprise Financial Services CVE-2018-2484 Remote Authorization Bypass Vulnerability
References:
References: