← volver
CVE-2018-2474

CVE-2018-2474

EPSS 0.7%
SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection.
Productos afectados
SAP · SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2)

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://launchpad.support.sap.com/#/notes/2696889https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095http://www.securityfocus.com/bid/105534