CRITICAL🇵🇱 Wersja polska

CVE-2020-6242

CVSS 9.8v3.1pub. 2020-05-12upd. 2024-11-21

SAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an attacker to logon on the Central Management Console without password in case of the BIPRWS application server was not protected with some specific certificate, leading to Missing Authentication Check.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Sap Businessobjects Business Intelligence Platform

    APP
    Sap
    1.02.02.12.22.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-0018CRITICAL10.0PL ✓same product

Stored XSS w SAP BusinessObjects BI Platform CMC — CVSS 10.0

CVE-2023-0022CRITICAL9.9PL ✓same product

SAP BusinessObjects BI — zdalne wykonanie kodu przez uwierzytelnionego użytkownika

CVE-2020-26831CRITICAL9.6PL ✓same product

SAP BusinessObjects BI Platform — SSRF i ujawnienie plików przez XML Injection

CVE-2020-6294CRITICAL9.1PL ✓same product

SAP BusinessObjects BI Platform – brak uwierzytelnienia w komponencie Xvfb (Unix)

CVE-2020-6195CRITICAL9.8PL ✓same product

SAP BusinessObjects BI Platform CMC ujawnia hasło w plaintext w odpowiedzi HTTP