CVE-2018-2471

Опубликовано: 09 окт. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted.

Ссылки

http://www.securityfocus.com/bid/105530
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2654905
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
Vendor Advisory
http://www.securityfocus.com/bid/105530
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2654905
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.10:*:*:*:*:*:*:*

cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.20:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00347

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-p237-w4qx-jp56