CVE-2018-2377: Medium severity sap hana extended application services, advanced model vulnerability
Published Feb 14, 2018
·Updated
In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized users.
Affected Software
2 affected components
SAP HANA Extended Application Services=1.0
SAP HANA Extend Application Services=1.0
Event History
Feb 14, 2018
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-2377?
CVE-2018-2377 has been rated as a medium severity vulnerability.
2
How do I fix CVE-2018-2377?
To mitigate CVE-2018-2377, update to the latest version of SAP HANA Extended Application Services, 1.0.
3
Who is affected by CVE-2018-2377?
CVE-2018-2377 affects all users of SAP HANA Extended Application Services, 1.0.
4
What type of vulnerability is CVE-2018-2377?
CVE-2018-2377 is an information disclosure vulnerability.
5
What could an attacker achieve with CVE-2018-2377?
An attacker could retrieve sensitive server statistics and status information from SAP HANA Extended Application Services, 1.0.