CVE-2018-2478

State: Published
Severity: Not scored
Published: Nov 13, 2018
Updated: Aug 5, 2024
Reserved: Dec 15, 2017

Description

An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. Not all commands are possible, only those that can be executed by the <sid>adm user. The commands executed depend upon the privileges of the <sid>adm user.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
SAP Basis (TREX / BWA installation)SAP	= 7.0 to 7.02Affected = 7.10 to 7.11Affected = 7.30Affected = 7.31Affected = 7.40Affected = 7.50 to 7.53Affected

References

105904vdb-entry
https://launchpad.support.sap.com/#/notes/2675696
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.