CVE-2018-2372

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services version 1.0

Description A plain keystore password is written to a system log file, which could endanger the confidentiality of SSL communication.

Recommendations For SAP HANA Extended Application Services version 1.0, consider restricting access to system log files to minimize the risk of exploitation. As a temporary workaround, review and securely configure logging settings to prevent sensitive information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.