2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"SAP Cloud Platform Connector","vendor":"SAP SE","versions":[{"status":"affected","version":"2.0"}]}],"source":"cna@sap.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:sap:cloud_platform:2.0:*:*:*:*:*:*:*","matchCriteriaId":"55749B47-2513-4CFA-BAC6-48C5CD866C6C","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform."},{"lang":"es","value":"Gestión incorrecta de sesión al emplear SAP Cloud Platform 2.0 (Connectivity Service y Cloud Connector). Bajo ciertas condiciones, los datos de otros usuarios podrían mostrarse o modificarse al emplear una aplicación montada sobre SAP Cloud Platform."}],"id":"CVE-2018-2409","lastModified":"2026-06-17T01:55:39.277","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":6.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.0"},"exploitabilityScore":2.8,"impactScore":3.4,"source":"cna@sap.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-04-10T15:29:01.487","references":[{"source":"cna@sap.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/103702"},{"source":"cna@sap.com","tags":["Vendor Advisory"],"url":"https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/"},{"source":"cna@sap.com","tags":["Permissions Required"],"url":"https://launchpad.support.sap.com/#/notes/2614141"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/103702"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"],"url":"https://launchpad.support.sap.com/#/notes/2614141"}],"sourceIdentifier":"cna@sap.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-384"}],"source":"nvd@nist.gov","type":"Primary"}]}
|