CVE-2018-2450

https://notcve.org/view.php?id=CVE-2018-2450

SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database. SAP MaxDB (liveCache), en versiones 7.8 y 7.9, permite que un atacante que obtenga privilegios de operador DBM ejecute consultas manipuladas en la base de datos y, por lo tanto, leer, modificar o eliminar información sensible de la base de datos. • http://www.securityfocus.com/bid/105063 https://launchpad.support.sap.com/#/notes/2660005 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •