PT-2020-19010
CVE-2020-6211
·
تاريخ النشر
2020-04-14
·
تاريخ التحديث
2020-04-15
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAP Business Objects Business Intelligence Platform (AdminTools) versions 4.1, 4.2
Description
The issue allows an attacker to redirect users to a malicious site due to insufficient URL validation, potentially leading to the theft of victim credentials.
Recommendations
For versions 4.1, update the software to a version that includes proper URL validation to prevent redirection attacks.
For version 4.2, apply the necessary configuration changes to ensure sufficient URL validation and prevent credential theft.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾