CVE-2019-0287

Опубликовано: 14 мая 2019

Источник: nvd

CVSS3: 7.6

CVSS2: 6.8

EPSS Низкий

Описание

Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server), versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted.

Ссылки

http://www.securityfocus.com/bid/108316
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2737278
Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032
Vendor Advisory
http://www.securityfocus.com/bid/108316
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2737278
Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:businessobjects:4.2:*:*:*:*:*:*:*

cpe:2.3:a:sap:businessobjects:4.3:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00498

Низкий

7.6 High

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-xh63-pmfx-3pr8