CVE-2018-2372: Medium severity sap hana extended application services, advanced model vulnerability
A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentiality of SSL communication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-2372?
CVE-2018-2372 is considered a medium severity vulnerability due to the risk it poses to the confidentiality of sensitive information.
How do I fix CVE-2018-2372?
To fix CVE-2018-2372, ensure that the keystore password is not logged to the system log files by implementing the recommended SAP security updates.
What could be the consequences of CVE-2018-2372?
The consequence of CVE-2018-2372 is that an attacker could gain unauthorized access to the keystore password, compromising SSL communications.
Which versions of SAP are affected by CVE-2018-2372?
CVE-2018-2372 affects SAP HANA Extended Application Services version 1.0.
Is CVE-2018-2372 related to other vulnerabilities?
CVE-2018-2372 highlights concerns related to logging sensitive information, which can be a common issue in other security vulnerabilities.