PT-2014-8460 · Sap · Sap Businessobjects Edge

Published 2014-10-16 · Updated 2018-10-09 · CVE-2014-8311

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Edge version 4.0

Description The issue allows remote attackers to obtain sensitive information. This is achieved via an InfoStore query to a CORBA listener.

Recommendations For SAP BusinessObjects Edge version 4.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-8311

Affected Products

Sap Businessobjects Edge

References · 7

• https://service.sap.com/sap/support/notes/1998990 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8311 · Security Note
• http://onapsis.com/resources/get.php?resid=adv_onapsis-2014-031 · Note
• http://securityfocus.com/archive/1/533648/100/0/threaded · Note
• http://packetstormsecurity.com/files/128601/SAP-Business-Objects-Information-Disclosure-Via-CORBA.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96876 · Note
• http://seclists.org/fulldisclosure/2014/Oct/39 · Note