First published: Wed Feb 12 2020(Updated: )
Certain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC), version 4.2, generates error messages that can give enterprise private-network related information which would otherwise be restricted leading to Information Disclosure.
Credit: cna@sap.com
Affected Software | Affected Version | How to fix |
---|---|---|
Sap Businessobjects Business Intelligence Platform | =4.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-6189 is a vulnerability in certain settings page(s) in SAP Business Objects Business Intelligence Platform version 4.2 that can lead to information disclosure.
The severity of CVE-2020-6189 is medium with a CVSS score of 5.3.
CVE-2020-6189 can generate error messages that disclose enterprise private-network related information.
The affected software version for CVE-2020-6189 is SAP Business Objects Business Intelligence Platform version 4.2.
To fix CVE-2020-6189, update to a newer version of SAP Business Objects Business Intelligence Platform.