CVE-2018-2402 Information disclosure in SAP HANA

High 7.6 Published 14 Mar 2018 Updated 5 Aug 2024

Attackers with control system access can read clear-text credentials from trace files in SAP HANA capture and replay mode, leading to unauthorized data access.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2018-2402?

CVE-2018-2402 is a high-severity vulnerability in SAP HANA, published on 14 Mar 2018. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.

Official description

In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more information about capture & replay), user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorizations on the control system may be able to access the user credentials and gain unauthorized access to data in the captured or target system.

Weakness: CWE-200

Which versions are affected by CVE-2018-2402?

It affects 1 product.

Products include Sap Hana.

How do I fix CVE-2018-2402?

No fix has been published for CVE-2018-2402 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-2402 being exploited?

There is no known exploitation of CVE-2018-2402 in the wild and no public exploit code.

Sources

Also known as GHSA-955r-gv79-5833.