CVE-2018-2449

SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for valid repository user

published August 14, 2018

CVSS
—
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for valid repository user. This is an unauthenticated functionality that you can use on windows machines to do SMB relaying.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01620 · 75.9th percentile
Published
2018-08-14T16:00Z
EPSS history
Timeline
  • 14 AUG 16:00Z
    SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for valid repository user
    cvelistv5