CVE-2018-2403

Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted

Medium · published April 10, 2018

CVSS v3.0
5.4
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an authorized user to get SAP Disclosure Management to point a specific chapter type to a chapter the user has not been given access to.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01132 · 66.0th percentile
Published
2018-04-10T15:00Z
EPSS history
Timeline
  • 10 APR 15:00Z
    Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted
    cvelistv5