PT-2021-8387
CVE-2015-2073
·
تاريخ النشر
2021-08-09
·
تاريخ التحديث
2021-08-13
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SAP BusinessObjects Edge version 4.0
Description
The issue allows remote attackers to read arbitrary files via a full pathname. This is related to the File Repository Server (FRS) CORBA listener.
Recommendations
For SAP BusinessObjects Edge version 4.0, apply the fix as described in SAP Note 2018682 to resolve the issue. As a temporary workaround, consider restricting access to the FRS CORBA listener to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾