CVE-2020-6218 — Sensitive Information Exposure in SE SAP Business Objects Business Intelligence Platform

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.2%
top 52.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Business Objects Business Intelligence PlatformSAP Businessobjects Business Intelligence Platform
Timeline
PublishedApr 14
Latest updateMay 24

Description

Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to access information that should otherwise be restricted, leading to Information Disclosure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:NExploitability: 3.1 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-rr5c-xv63-xx9v: Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4↗2022-05-24
▶
CVEList
CVE-2020-6218: Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4↗2020-04-14
▶
CVE-2020-6218 — Sensitive Information Exposure | cvebase