← Retour aux CVEs

CVE-2020-6195

CRITICAL

9.8

Description

SAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure. It involves social engineering in order to gain access to system and If password is known, it would give administrative rights to the attacker to read/modify delete the data and rights within the system.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie4/14/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

sap:businessobjects_business_intelligence_platform

Faiblesses (CWE)

CWE-319CWE-522

References

https://launchpad.support.sap.com/#/notes/2878507(cna@sap.com)

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202(cna@sap.com)

https://launchpad.support.sap.com/#/notes/2878507(af854a3a-2127-422b-91ae-364da2661108)

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.