PT-2020-19084 · Sap · Sap Businessobjects Business Intelligence Platform

Published 2020-10-20 · Updated 2024-08-12 · CVE-2020-6308

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform (Web Services) versions 410, 420, 430

Description The issue allows an unauthenticated attacker to inject arbitrary values as CMS parameters, enabling them to perform lookups on the internal network, which is otherwise not accessible externally. This can lead to scanning the internal network to determine its infrastructure and gather information for further attacks, such as remote file inclusion, retrieving server files, bypassing the firewall, and forcing the vulnerable server to perform malicious requests, resulting in a Server-Side Request Forgery vulnerability.

Recommendations For SAP BusinessObjects Business Intelligence Platform (Web Services) versions 410, 420, 430, consider restricting access to the CMS parameters to prevent arbitrary value injection until a patch is available. As a temporary workaround, restrict the ability of the server to perform requests to internal network resources to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2020-6308

Affected Products

Sap Businessobjects Business Intelligence Platform

References · 6

• 🔥 https://github.com/InitRoot/CVE-2020-6308-PoC · Exploit
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6308 · Security Note
• https://launchpad.support.sap.com/#/notes/2943844 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-6308 · Vendor Advisory
• https://twitter.com/hanul93/status/1823149307752857908 · Twitter Post