PT-2020-19010
CVE-2020-6211
·
Published
2020-04-14
·
Updated
2020-04-15
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAP Business Objects Business Intelligence Platform (AdminTools) versions 4.1, 4.2
Description
The issue allows an attacker to redirect users to a malicious site due to insufficient URL validation, potentially leading to the theft of victim credentials.
Recommendations
For versions 4.1, update the software to a version that includes proper URL validation to prevent redirection attacks.
For version 4.2, apply the necessary configuration changes to ensure sufficient URL validation and prevent credential theft.
Found an issue in the description? Have something to add? Feel free to write us 👾