CVE-2018-2409

State: Published
Severity: 6.3 Medium
Published: Apr 10, 2018
Updated: Aug 5, 2024
Reserved: Dec 15, 2017

Description

Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform.

Scores

CVSS	Score	Vector	Source
3.0	6.3 Medium	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	sap

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
SAP Cloud Platform ConnectorSAP SE	2.0Affected

References

103702vdb-entry
https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/
https://launchpad.support.sap.com/#/notes/2614141

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.