An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. Not all commands are possible, only those that can be executed by the <sid>adm user. The commands executed depend upon the privileges of the <sid>adm user.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/105904 | Third Party Advisory VDB Entry |
| https://launchpad.support.sap.com/#/notes/2675696 | Permissions Required Vendor Advisory |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 | Vendor Advisory |
| http://www.securityfocus.com/bid/105904 | Third Party Advisory VDB Entry |
| https://launchpad.support.sap.com/#/notes/2675696 | Permissions Required Vendor Advisory |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/105904 - Third Party Advisory, VDB Entry | |
| References | () https://launchpad.support.sap.com/#/notes/2675696 - Permissions Required, Vendor Advisory | |
| References | () https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 - Vendor Advisory |
Information
Published : 2018-11-13 20:29
Updated : 2024-11-21 04:03
NVD link : CVE-2018-2478
Mitre link : CVE-2018-2478
CVE.ORG link : CVE-2018-2478
JSON object : View
Products Affected
sap
- basis
CWE