Vulnerabilities > CVE-2018-2487 - Unspecified vulnerability in SAP Disclosure Management 10.1
Attack vector
NETWORK Attack complexity
HIGH Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
SAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file provided by users: When extracted in specific use cases, files within this zip file can land in different locations than the originally intended extraction point.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |