PT-2020-19010

CVE-2020-6211

·

Published

2020-04-14

·

Updated

2020-04-15

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform (AdminTools) versions 4.1, 4.2
Description The issue allows an attacker to redirect users to a malicious site due to insufficient URL validation, potentially leading to the theft of victim credentials.
Recommendations For versions 4.1, update the software to a version that includes proper URL validation to prevent redirection attacks. For version 4.2, apply the necessary configuration changes to ensure sufficient URL validation and prevent credential theft.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾