CVE-2018-2369

CVE-2018-2369 is an information disclosure vulnerability affecting SAP HANA versions 1.00 and 2.00. An unauthenticated attacker can exploit a flaw in the SQL interface's authentication function to disclose 8 bytes of server process memory. The CVSS score of 5.3 (Medium) indicates a low-complexity attack that requires no user interaction and results in limited confidentiality impact, as the attacker cannot control the leaked memory location. There is no evidence of active exploitation, nor are public exploit tools like Metasploit or Nuclei available. Community discussion and media coverage are minimal, with only one article from SecurityWeek mentioning its resolution.