PT-2021-8387
CVE-2015-2073
·
Published
2021-08-09
·
Updated
2021-08-13
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SAP BusinessObjects Edge version 4.0
Description
The issue allows remote attackers to read arbitrary files via a full pathname. This is related to the File Repository Server (FRS) CORBA listener.
Recommendations
For SAP BusinessObjects Edge version 4.0, apply the fix as described in SAP Note 2018682 to resolve the issue. As a temporary workaround, consider restricting access to the FRS CORBA listener to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾