CVE-2018-2361: High severity sap netweaver solution manager vulnerability
Published Jan 9, 2018
·Updated
In SAP Solution Manager 7.20, the role SAPBPOCONFIG gives the Business Process Operations (BPO) configuration user more authorization than required for configuring the BPO tools.
Affected Software
1 affected component
SAP Solution Manager=7.20
Event History
Jan 9, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2018-2361.
2
What is the severity of CVE-2018-2361?
The severity of CVE-2018-2361 is high with a score of 8.8.
3
What is the affected software for CVE-2018-2361?
The affected software for CVE-2018-2361 is SAP Solution Manager 7.20.
4
How does the vulnerability in SAP Solution Manager 7.20 affect users?
The vulnerability in SAP Solution Manager 7.20 allows the role SAP_BPO_CONFIG to have more authorization than required for configuring the BPO tools, potentially leading to unauthorized access or misuse.
5
Are there any available security patches or fixes for CVE-2018-2361?
Yes, security patches and fixes for CVE-2018-2361 are available. Please refer to the SAP Security Patch Day January 2018 blog post and SAP Note 2507934 for more information.