CVE-2018-2361

Description

In SAP Solution Manager 7.20, the role SAP_BPO_CONFIG gives the Business Process Operations (BPO) configuration user more authorization than required for configuring the BPO tools.

Affected products

• SAP_SE / SAP Solution Manager7.20 – 7.20

References

• MISChttps://blogs.sap.com/2018/01/09/sap-security-patch-day-january-2018/
• MISChttps://launchpad.support.sap.com/#/notes/2507934
• MISChttp://www.securityfocus.com/bid/102450