CVE-2018-2360

high

Description

SAP Startup Service, SAP KERNEL 7.45, 7.49, and 7.52, is missing an authentication check for functionalities that require user identity and cause consumption of file system storage.

References

https://launchpad.support.sap.com/#/notes/2523961

https://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/

http://www.securityfocus.com/bid/102448

Details

Source: Mitre, NVD

Published: 2018-01-09

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.03032