CVEvulnerability
CVE-2020-6218
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-04-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.0 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
- CVSS 3.0 ([email protected])
- 5.0 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Description
Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to access information that should otherwise be restricted, leading to Information Disclosure.
Affected configurations
• sap businessobjects business intelligence platform 4.1
• sap businessobjects business intelligence platform 4.2
References
- https://launchpad.support.sap.com/#/notes/2878507 Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2878507 Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 Vendor Advisory