CVE-2018-2494 Vulnerability Details

  /     /     /  

CVE-2018-2494 Metadata Quick Info

CVE Published: 11/12/2018 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: sap | Vendor: SAP | Product: SAP Basis (AS ABAP of SAP NetWeaver)
Status : PUBLISHED

---

CVE-2018-2494 Description

Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of SAP NetWeaver 700 to 750, from 750 onwards delivered as ABAP Platform.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Missing Authorization Check
Source: SAP

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).