Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2018-2409

Description

Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform.

POC

Reference

- https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/

Github

No PoCs found on GitHub currently.