PT-2018-15568 · Sap · Sap Businessobjects Business Intelligence

Publicado 2018-08-14 · Atualizado 2020-09-29 · CVE-2018-2446

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence versions 4.1, 4.2

Description The issue allows an unauthenticated user to read sensitive information, such as the server name, leading to an information disclosure.

Recommendations For versions 4.1 and 4.2, update to a version that includes a fix for this issue to prevent information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2018-2446

Produtos afetados

Sap Businessobjects Business Intelligence

Referências · 5

• https://osv.dev/vulnerability/CVE-2018-2446 · Aviso do Fabricante
• https://launchpad.support.sap.com/#/notes/2633846 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-2446 · Nota de Segurança
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742 · Aviso do Fabricante
• http://securityfocus.com/bid/105089 · Nota