Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/102998 | Third Party Advisory VDB Entry |
| https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/ | Vendor Advisory |
| https://launchpad.support.sap.com/#/notes/2493727 | Permissions Required |
| http://www.securityfocus.com/bid/102998 | Third Party Advisory VDB Entry |
| https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/ | Vendor Advisory |
| https://launchpad.support.sap.com/#/notes/2493727 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/102998 - Third Party Advisory, VDB Entry | |
| References | () https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/ - Vendor Advisory | |
| References | () https://launchpad.support.sap.com/#/notes/2493727 - Permissions Required |
Information
Published : 2018-02-14 12:29
Updated : 2024-11-21 04:03
NVD link : CVE-2018-2370
Mitre link : CVE-2018-2370
CVE.ORG link : CVE-2018-2370
JSON object : View
Products Affected
sap
- bi_launchpad
CWE
CWE-918
Server-Side Request Forgery (SSRF)