PT-2018-15583 · Google+1 · Google Chrome+1

Published 2018-10-09 · Updated 2020-08-24 · CVE-2018-2467

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI Platform Servers versions 4.1 through 4.2

Description The issue arises in the Software Development Kit of the SAP BusinessObjects BI Platform Servers. By using a specially crafted URL in a web browser, such as Chrome, the system returns an error that reveals the path of the used application server.

Recommendations For versions 4.1 and 4.2, consider restricting access to the vulnerable URL to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2018-2467

Affected Products

Google Chrome

Sap Businessobjects Bi Platform Servers

References · 5

• https://osv.dev/vulnerability/CVE-2018-2467 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-2467 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/2623618 · Note
• http://securityfocus.com/bid/105544 · Note