CVE-2020-6227

SAP Business Objects Business Intelligence Platform (CMS / Auditing issues), version 4.2, allows attacker to send specially crafted GIOP packets to several services due to Improper Input Validation, allowing to forge additional entries in GLF log files.
Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.2:-:*:*:*:*:*:*

History

21 Nov 2024, 05:35

Type Values Removed Values Added
References () https://launchpad.support.sap.com/#/notes/2863396 - Permissions Required, Vendor Advisory () https://launchpad.support.sap.com/#/notes/2863396 - Permissions Required, Vendor Advisory
References () https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 - Vendor Advisory () https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 - Vendor Advisory

Information

Published : 2020-04-14 19:15

Updated : 2024-11-21 05:35


NVD link : CVE-2020-6227

Mitre link : CVE-2020-6227

CVE.ORG link : CVE-2020-6227


JSON object : View

Products Affected

sap

  • businessobjects_business_intelligence_platform
CWE
CWE-20

Improper Input Validation

CWE-116

Improper Encoding or Escaping of Output