CVE-2020-6218

Published at:
2020-04-14T19:15:17.170

Global infos:

Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to access information that should otherwise be restricted, leading to Information Disclosure.

CVE Status: Modified

References:

  • [email protected]
  • [email protected]
  • af854a3a-2127-422b-91ae-364da2661108
  • af854a3a-2127-422b-91ae-364da2661108
  • Metrics:

    AttributeValue
    Attack ComplexityLOW
    Attack VectorNETWORK
    Availability ImpactNONE
    Base Score5
    Base SeverityMEDIUM
    Confidentiality ImpactLOW
    Integrity ImpactNONE
    Privileges RequiredLOW
    ScopeCHANGED
    User InteractionNONE
    Vector StringCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
    Exploitability Score3.1
    Impact Score1.4
    Source[email protected]
    TypePrimary

    Links:

    Exploit-db
    Github