« Volver al listado

CVE-2018-2441

Estado: ModificadaMedia (5.5)—

Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49, 7.53 and 7.73, allows an attacker to transport information which would otherwise be restricted.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

SAP — SAP Kernel

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-2441",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "cna@sap.com",
      "affectedData": [
        {
          "vendor": "SAP",
          "product": "SAP Change and Transport System (ABAP)",
          "versions": [
            {
              "status": "affected",
              "version": "SAP KERNEL 32 NUC 7.21, 7.21EXT, 7.22 and 7.22EXT"
            },
            {
              "status": "affected",
              "version": "SAP KERNEL 32 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT"
            },
            {
              "status": "affected",
              "version": "SAP KERNEL 64 NUC 7.21, 7.21EXT, 7.22 and 7.22EXT"
            },
            {
              "status": "affected",
              "version": "SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT"
            },
            {
              "status": "affected",
              "version": "SAP KERNEL  7.21, 7.22, 7.45, 7.49, 7.53 and 7.73"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-08-14T16:29:00.553",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/105090",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cna@sap.com"
    },
    {
      "url": "https://launchpad.support.sap.com/#/notes/2671160",
      "tags": [
        "Permissions Required",
        "Vendor Advisory"
      ],
      "source": "cna@sap.com"
    },
    {
      "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cna@sap.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/105090",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://launchpad.support.sap.com/#/notes/2671160",
      "tags": [
        "Permissions Required",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49, 7.53 and 7.73, allows an attacker to transport information which would otherwise be restricted."
    },
    {
      "lang": "es",
      "value": "En ciertas condiciones, SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 y 7.22EXT y SAP KERNEL 7.21, 7.22, 7.45, 7.49, 7.53 y 7.73, permiten que un atacante transporte información que, de otra forma, estaría restringida."
    }
  ],
  "lastModified": "2026-06-17T01:55:42.277",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1DB2B37-EC52-4FE6-9861-A98A9E365B61"
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.21ext:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "168D38D8-CE37-4FF4-B089-DCBB0D5A3387"
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80D1ECE8-0465-4B82-A0B7-BC55438FFC43"
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.22ext:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56247321-E033-4097-A176-BE71DEBD5920"
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.45:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "517E04CB-B712-477E-8F64-B35F9D0D932B"
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.49:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "018F8061-43B6-4F29-B914-C779569C58CD"
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.53:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F7EA62C-67A6-4971-AC33-D5A3D390CE52"
            },
            {
              "criteria": "cpe:2.3:a:sap:sap_kernel:7.73:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2DC3DD5-36D6-462E-BD41-E1EDB5843A8A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cna@sap.com"
}