SAP SRM-MDM Utilities Information Disclosure Vulnerability

CVE-2018-2448 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted.

Learn more about our User Device Pen Test.