Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xxhh-59gh-6ffx

Опубликовано: 14 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the public java SDK. Programs could impact the confidentiality, integrity and availability of the system.

SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the public java SDK. Programs could impact the confidentiality, integrity and availability of the system.

EPSS

Процентиль: 84%
0.02237
Низкий

8.8 High

CVSS3

Дефекты

CWE-74
CWE-78

Связанные уязвимости

CVSS3: 9
nvd
больше 2 лет назад

SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the public java SDK. Programs could impact the confidentiality, integrity and availability of the system.

CVSS3: 9
fstec
больше 2 лет назад

Уязвимость консоли Central Management Console (CMC) платформы бизнес-аналитики SAP Business Objects Business Intelligence Platform, позволяющая нарушителю выполнить произвольный код и получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 84%
0.02237
Низкий

8.8 High

CVSS3

Дефекты

CWE-74
CWE-78