CVE-2018-2419
First published: Wed May 09 2018(Updated: )
SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap Sapscore | =1.11 | |
| Sap Sapscore | =1.12 | |
| Sap S4core | =1.01 | |
| Sap S4core | =1.02 | |
| Sap Ea-finserv | =6.04 | |
| Sap Ea-finserv | =6.05 | |
| Sap Ea-finserv | =6.06 | |
| Sap Ea-finserv | =6.16 | |
| Sap Ea-finserv | =6.17 | |
| Sap Ea-finserv | =6.18 | |
| Sap Ea-finserv | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-2419?
The severity of CVE-2018-2419 is medium with a severity value of 4.6.
What is the affected software for CVE-2018-2419?
The affected software for CVE-2018-2419 includes SAPSCORE 1.11, SAPSCORE 1.12, S4CORE 1.01, S4CORE 1.02, EA-FINSERV 6.04, EA-FINSERV 6.05, EA-FINSERV 6.06, EA-FINSERV 6.16, EA-FINSERV 6.17, EA-FINSERV 6.18, and EA-FINSERV 8.0.
What is the vulnerability description of CVE-2018-2419?
CVE-2018-2419 is a vulnerability in SAP Enterprise Financial Services that allows an authenticated user to escalate privileges due to the lack of necessary authorization checks.
Are there any references available for CVE-2018-2419?
Yes, references for CVE-2018-2419 include http://www.securityfocus.com/bid/104116, https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/, and https://launchpad.support.sap.com/#/notes/2596627.
What is the CWE category for CVE-2018-2419?
CVE-2018-2419 belongs to CWE category 862.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/event
- agent/type
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap sapscore
- version/sap sapscore/1.11
- version/sap sapscore/1.12
- canonical/sap s4core
- version/sap s4core/1.01
- version/sap s4core/1.02
- canonical/sap ea-finserv
- version/sap ea-finserv/6.04
- version/sap ea-finserv/6.05
- version/sap ea-finserv/6.06
- version/sap ea-finserv/6.16
- version/sap ea-finserv/6.17
- version/sap ea-finserv/6.18
- version/sap ea-finserv/8.0