CVE-2020-6189: Medium severity SAP BusinessObjects Business Intelligence platform vulnerability

Published Feb 12, 2020

Updated

Certain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC), version 4.2, generates error messages that can give enterprise private-network related information which would otherwise be restricted leading to Information Disclosure.

Affected Software

1 affected component

SAP BusinessObjects Business Intelligence platform=4.2

Event History

Feb 12, 2020

CVE Published

via MITRE·07:45 PM

Data Sourced

via MITRE·07:45 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-6189?

CVE-2020-6189 is a vulnerability in certain settings page(s) in SAP Business Objects Business Intelligence Platform version 4.2 that can lead to information disclosure.

What is the severity of CVE-2020-6189?

The severity of CVE-2020-6189 is medium with a CVSS score of 5.3.

How does CVE-2020-6189 impact SAP Business Objects Business Intelligence Platform version 4.2?

CVE-2020-6189 can generate error messages that disclose enterprise private-network related information.

What is the affected software version for CVE-2020-6189?

The affected software version for CVE-2020-6189 is SAP Business Objects Business Intelligence Platform version 4.2.

How can I fix CVE-2020-6189?

To fix CVE-2020-6189, update to a newer version of SAP Business Objects Business Intelligence Platform.