Information Disclosure in SAP Business Objects Business Intelligence Platform
CVE-2020-6189

5.3MEDIUM

Key Information:

Vendor
SAP
Status
SAP Business Objects Business Intelligence Platform (cmc)
Vendor
CVE Published:
12 February 2020

Summary

Certain settings pages in the SAP Business Objects Business Intelligence Platform (CMC), version 4.2, can generate error messages that inadvertently expose sensitive information about the enterprise's private network. This vulnerability highlights the risk of unintended data exposure, making it crucial for organizations to review their security configurations and safeguard against possible exploitation.

Affected Version(s)

SAP Business Objects Business Intelligence Platform (CMC) = 4.2

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2695210
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.