PT-2020-19010 · Sap · Sap Businessobjects Business Intelligence Platform

Published 2020-04-14 · Updated 2020-04-15 · CVE-2020-6211

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform (AdminTools) versions 4.1, 4.2

Description The issue allows an attacker to redirect users to a malicious site due to insufficient URL validation, potentially leading to the theft of victim credentials.

Recommendations For versions 4.1, update the software to a version that includes proper URL validation to prevent redirection attacks. For version 4.2, apply the necessary configuration changes to ensure sufficient URL validation and prevent credential theft.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-6211

Affected Products

Sap Businessobjects Business Intelligence Platform

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-6211 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-6211 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/2878507 · Vendor Advisory