CVE-2018-2448

https://notcve.org/view.php?id=CVE-2018-2448

Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted. En ciertas condiciones, SAP SRM-MDM (CATALOG en versiones 3.0, 7.01 y 7.02) utiliza funcionalidades que permiten que un atacante acceda a información de usuarios que normalmente estaría restringida. • http://www.securityfocus.com/bid/105077 https://launchpad.support.sap.com/#/notes/2653846 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742 •