PT-2020-19041 · Sap · Sap Businessobjects Business Intelligence Platform

Published 2020-05-12 · Updated 2020-05-14 · CVE-2020-6245

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform version 4.2

Description The issue allows an attacker with access to a local instance to inject files or code that can be executed by the application due to improper control of resource identifiers.

Recommendations For SAP Business Objects Business Intelligence Platform version 4.2, update to a version that includes a fix for this issue, as no specific workaround is provided in the available information.

Fix

Special Elements Injection

Weakness Enumeration

CWE-99

CWE-74

Related Identifiers

CVE-2020-6245

Affected Products

Sap Businessobjects Business Intelligence Platform

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-6245 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-6245 · Vendor Advisory
• https://t.me/cvenotify/3716 · Telegram Post
• https://launchpad.support.sap.com/#/notes/2828558 · Note