CVE-2010-3982: Infoleak
SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning" issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3982?
CVE-2010-3982 is considered a moderate severity vulnerability as it allows remote attackers to conduct internal port scans.
How do I fix CVE-2010-3982?
To remediate CVE-2010-3982, update to a newer version of SAP BusinessObjects that addresses this vulnerability.
What software is affected by CVE-2010-3982?
CVE-2010-3982 affects SAP BusinessObjects Enterprise XI 3.2.
What type of attack is related to CVE-2010-3982?
CVE-2010-3982 is related to internal port scanning attacks that can expose sensitive information.
Can CVE-2010-3982 be exploited remotely?
Yes, CVE-2010-3982 can be exploited remotely through a crafted request to the vulnerable SAP BusinessObjects instance.