Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xxhh-59gh-6ffx

Опубликовано: 14 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the public java SDK. Programs could impact the confidentiality, integrity and availability of the system.

SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the public java SDK. Programs could impact the confidentiality, integrity and availability of the system.

EPSS

Процентиль: 86%
0.02985
Низкий

8.8 High

CVSS3

Дефекты

CWE-74
CWE-78

Связанные уязвимости

CVSS3: 9
nvd
почти 3 года назад

SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the public java SDK. Programs could impact the confidentiality, integrity and availability of the system.

CVSS3: 9
fstec
почти 3 года назад

Уязвимость консоли Central Management Console (CMC) платформы бизнес-аналитики SAP Business Objects Business Intelligence Platform, позволяющая нарушителю выполнить произвольный код и получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 86%
0.02985
Низкий

8.8 High

CVSS3

Дефекты

CWE-74
CWE-78