CVE-2018-2409

Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector)

Medium · published April 10, 2018

CVSS v3.0
6.3
EPSS
1%
Percentile
67.7
In the wild
Unconfirmed
What it is

Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01188 · 67.7th percentile
Published
2018-04-10T15:00Z
EPSS history
Timeline
  • 10 APR 15:00Z
    Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector)
    cvelistv5