CVE-2018-2403
SAP Disclosure Management 10.1 contains an access-control weakness that allows an authorized user to point a specific chapter type to a chapter the user should not access, effectively exposing restricted information. The vulnerability is documented across multiple sources (NVD CVE-2018-2403, CNVD...