CVE-2018-2503

By default, the SAP NetWeaver AS Java keystore service does not sufficiently restrict the access to resources that should be protected. This has been fixed in SAP NetWeaver AS Java (ServerCore versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50).

• CWE-862

• http://www.securityfocus.com/bid/106156Third Party Advisory, VDB Entry
• https://launchpad.support.sap.com/#/notes/2658279Permissions Required
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699Vendor Advisory
• http://www.securityfocus.com/bid/106156Third Party Advisory, VDB Entry
• https://launchpad.support.sap.com/#/notes/2658279Permissions Required
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699Vendor Advisory

Published

Dec 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-25024An issue was discovered in the actix-web crate before 0.7.15…9.8
• CVE-2018-25025An issue was discovered in the actix-web crate before 0.7.15…9.8
• CVE-2018-25026An issue was discovered in the actix-web crate before 0.7.15…9.8
• CVE-2018-25027An issue was discovered in the libpulse-binding crate before…7.5
• CVE-2018-25028An issue was discovered in the libpulse-binding crate before…7.5
• CVE-2018-25029The Z-Wave specification requires that S2 security can be do…8.1
• CVE-2018-25030A vulnerability classified as problematic has been found in …2.5
• CVE-2018-25031Swagger UI 4.1.2 and earlier could allow a remote attacker t…4.3
• CVE-2018-25032zlib before 1.2.12 allows memory corruption when deflating (…7.5
• CVE-2018-25033ADMesh through 0.98.4 has a heap-based buffer over-read in s…8.1
• CVE-2018-25034A vulnerability, which was classified as problematic, has be…5.4
• CVE-2018-25035A vulnerability, which was classified as problematic, was fo…5.4