CVE-2020-6242
First published: Tue May 12 2020(Updated: )
SAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an attacker to logon on the Central Management Console without password in case of the BIPRWS application server was not protected with some specific certificate, leading to Missing Authentication Check.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap Businessobjects Business Intelligence Platform | =1.0 | |
| Sap Businessobjects Business Intelligence Platform | =2.0 | |
| Sap Businessobjects Business Intelligence Platform | =2.1 | |
| Sap Businessobjects Business Intelligence Platform | =2.2 | |
| Sap Businessobjects Business Intelligence Platform | =2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-6242?
CVE-2020-6242 is a vulnerability in SAP Business Objects Business Intelligence Platform (Live Data Connect) that allows an attacker to logon on the Central Management Console without a password.
What is SAP Business Objects Business Intelligence Platform?
SAP Business Objects Business Intelligence Platform is a software platform used for business intelligence and reporting.
Which versions of SAP Business Objects Business Intelligence Platform are affected by CVE-2020-6242?
Versions 1.0, 2.0, 2.1, 2.2, and 2.3 of SAP Business Objects Business Intelligence Platform are affected by CVE-2020-6242.
What is the severity of CVE-2020-6242?
CVE-2020-6242 has a severity rating of critical, with a CVSS score of 9.8.
How can I protect against CVE-2020-6242?
To protect against CVE-2020-6242, ensure that the BIPRWS application server is protected with a specific certificate.
- collector/nvd-index
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- agent/description
- agent/event
- agent/tags
- vendor/sap
- canonical/sap businessobjects business intelligence platform
- version/sap businessobjects business intelligence platform/1.0
- version/sap businessobjects business intelligence platform/2.0
- version/sap businessobjects business intelligence platform/2.1
- version/sap businessobjects business intelligence platform/2.2
- version/sap businessobjects business intelligence platform/2.3