CVE-2018-2423: High severity sap netweaver as internet graphics server vulnerability
SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-2423?
CVE-2018-2423 is a vulnerability in SAP Internet Graphics Server (IGS) versions 7.20, 7.20EXT, 7.45, 7.49, and 7.53 that allows an attacker to prevent legitimate users from accessing a service through crashing or flooding the service.
How severe is CVE-2018-2423?
CVE-2018-2423 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2018-2423?
CVE-2018-2423 affects SAP Internet Graphics Server versions 7.20, 7.20EXT, 7.45, 7.49, and 7.53.
How can an attacker exploit CVE-2018-2423?
An attacker can exploit CVE-2018-2423 by crashing or flooding the SAP Internet Graphics Server (IGS) HTTP or RFC listener, which prevents legitimate users from accessing the service.
Where can I find more information about CVE-2018-2423?
You can find more information about CVE-2018-2423 in the following references: [SecurityFocus](http://www.securityfocus.com/bid/104109), [SAP Security Patch Day](https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/), [SAP Note](https://launchpad.support.sap.com/#/notes/2620744).