CVE-2018-2389

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server (IGS) versions 7.20, 7.20EXT, 7.45, 7.49, 7.53

Description The issue allows a malicious user to inject log files under certain conditions, potentially hiding important information in the log file.

Recommendations For SAP Internet Graphics Server (IGS) version 7.20, update to a version that includes a fix for this issue. For SAP Internet Graphics Server (IGS) version 7.20EXT, update to a version that includes a fix for this issue. For SAP Internet Graphics Server (IGS) version 7.45, update to a version that includes a fix for this issue. For SAP Internet Graphics Server (IGS) version 7.49, update to a version that includes a fix for this issue. For SAP Internet Graphics Server (IGS) version 7.53, update to a version that includes a fix for this issue.