CVE-2018-2379

2018-02-1412:00:00

sap

www.cve.org

EPSS

0.001

Percentile

28.4%

JSON

In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint.

CNA Affected

[
  {
    "product": "SAP HANA Extended Application Services",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

References

blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/

launchpad.support.sap.com/#/notes/2589129

EPSS

0.001

Percentile

28.4%

JSON

Related for CVELIST:CVE-2018-2379