CVE-2018-2406

published 2018-04-10

CVE-2018-2406: Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.

medium 5.3 CVSS 3.0

AV L AC L PR L UI N S U C L I L A L

Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
sap	crystal_reports_server	—	—
sap	crystal_reports_server	—	—
sap	crystal_reports_server	—	—
sap	crystal_reports_server	—	—

CWE-428