Type confusion

2018-04-1015:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.6%

JSON

Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an authorized user to get SAP Disclosure Management to point a specific chapter type to a chapter the user has not been given access to.

CPENameOperatorVersion
disclosure_managementeq10.1

CPE	Name	Operator	Version
	disclosure_management	eq	10.1

References

www.securityfocus.com/bid/103727

blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/

launchpad.support.sap.com/