medium5.3
CVE-2018-2370
Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allo…
Impact
Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Bi Launchpad | Versions 4.10, 4.20, 4.30 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/102998
- https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
- https://launchpad.support.sap.com/#/notes/2493727
- http://www.securityfocus.com/bid/102998
- https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
- https://launchpad.support.sap.com/#/notes/2493727