PT-2018-15583 · Google+1 · Google Chrome+1

Publicado 2018-10-09 · Atualizado 2020-08-24 · CVE-2018-2467

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI Platform Servers versions 4.1 through 4.2

Description The issue arises in the Software Development Kit of the SAP BusinessObjects BI Platform Servers. By using a specially crafted URL in a web browser, such as Chrome, the system returns an error that reveals the path of the used application server.

Recommendations For versions 4.1 and 4.2, consider restricting access to the vulnerable URL to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2018-2467

Produtos afetados

Google Chrome

Sap Businessobjects Bi Platform Servers

Referências · 5

• https://osv.dev/vulnerability/CVE-2018-2467 · Aviso do Fabricante
• https://launchpad.support.sap.com/#/notes/2623618 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-2467 · Nota de Segurança
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 · Aviso do Fabricante
• http://securityfocus.com/bid/105544 · Nota