CVE-2018-2361

In SAP Solution Manager 7.20, the role SAP_BPO_CONFIG gives the Business Process Operations (BPO) configuration user more authorization than required for configuring the BPO tools.
Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:solution_manager:7.20:*:*:*:*:*:*:*

History

21 Nov 2024, 04:03

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/102450 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/102450 - Third Party Advisory, VDB Entry
References () https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/ - Vendor Advisory () https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/ - Vendor Advisory
References () https://launchpad.support.sap.com/#/notes/2507934 - Permissions Required () https://launchpad.support.sap.com/#/notes/2507934 - Permissions Required

Information

Published : 2018-01-09 15:29

Updated : 2024-11-21 04:03


NVD link : CVE-2018-2361

Mitre link : CVE-2018-2361

CVE.ORG link : CVE-2018-2361


JSON object : View

Products Affected

sap

  • solution_manager
CWE
CWE-863

Incorrect Authorization