CVE-2018-2451

XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding authorizations have been revoked meanwhile by an administrator user. Similarly, an attacker who managed to gain access to the platform user's session might misuse the session token even after the session has been closed.

CVSS v3 6.6 MEDIUM
CVSS v2.0 6.0 MEDIUM

6.6^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability : 0.7 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability : 6.8 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/105091	Third Party Advisory VDB Entry
https://launchpad.support.sap.com/#/notes/2590705	Permissions Required Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:hana_extended_application_services:1.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-08-14 16:29

Updated : 2023-12-10 12:44

NVD link : CVE-2018-2451

Mitre link : CVE-2018-2451

CVE.ORG link : CVE-2018-2451

JSON object : View

Products Affected

sap

hana_extended_application_services

CWE

CWE-613

Insufficient Session Expiration

{"id": "CVE-2018-2451", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.7}]}, "published": "2018-08-14T16:29:01.693", "references": [{"url": "http://www.securityfocus.com/bid/105091", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cna@sap.com"}, {"url": "https://launchpad.support.sap.com/#/notes/2590705", "tags": ["Permissions Required", "Vendor Advisory"], "source": "cna@sap.com"}, {"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742", "tags": ["Patch", "Vendor Advisory"], "source": "cna@sap.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-613"}]}], "descriptions": [{"lang": "en", "value": "XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding authorizations have been revoked meanwhile by an administrator user. Similarly, an attacker who managed to gain access to the platform user's session might misuse the session token even after the session has been closed."}, {"lang": "es", "value": "En las sesiones de usuario XS Command-Line Interface (CLI) con SAP HANA Extended Application Services (XS), versi\u00f3n 1, el servidor avanzado podr\u00eda tener un per\u00edodo de validez prolongado no intencionado. En consecuencia, un usuario de la plataforma podr\u00eda acceder a recursos del controlador mediante una sesi\u00f3n de la interfaz de l\u00ednea de comandos activa incluso despu\u00e9s de que las autorizaciones correspondientes hayan sido revocadas por un usuario administrador. De manera similar, un atacante que consigue obtener acceso a la sesi\u00f3n de usuario de la plataforma podr\u00eda emplear err\u00f3neamente el token de sesi\u00f3n incluso despu\u00e9s de que se haya cerrado la sesi\u00f3n."}], "lastModified": "2020-08-24T17:37:01.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:hana_extended_application_services:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F314AEB2-7F5C-4CD8-8DD5-359B75FCD9C5"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}