CVE-2018-2503

By default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that should be protected

published December 11, 2018

CVSS
—
EPSS
1%
Percentile
46.7
In the wild
Unconfirmed
What it is

By default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that should be protected. This has been fixed in SAP NetWeaver AS Java (ServerCore versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00575 · 46.7th percentile
Published
2018-12-11T23:00Z
EPSS history
Timeline
  • 11 DEC 23:00Z
    By default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that should be protected
    cvelistv5