CVE-2018-2368

2018-03-0117:00:00

sap

www.cve.org

AI Score

9.7

Confidence

High

EPSS

0.005

Percentile

75.5%

JSON

SAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform any authentication checks for functionalities that require user identity.

CNA Affected

[
  {
    "product": "SAP NetWeaver System Landscape Directory, LM-Core",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "7.10"
      },
      {
        "status": "affected",
        "version": "7.20"
      },
      {
        "status": "affected",
        "version": "7.30"
      },
      {
        "status": "affected",
        "version": "7.31"
      },
      {
        "status": "affected",
        "version": "7.40"
      }
    ]
  }
]