Vulners
Lucene search
SAP Crystal Reports - Information Disclosure
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | SAP Crystal Reports - Information Disclosure Vulnerability | 2 Jul 201900:00 | – | zdt |
 | The vulnerability of the .NET SDK WebForm Viewer component, a software tool for report development with SAP Crystal Reports for Visual Studio, allows attackers to disclose protected information. | 11 Jul 201900:00 | – | bdu_fstec |
 | SAP Crystal Reports for Visual Studio Information Disclosure Vulnerability | 11 Apr 201900:00 | – | cnvd |
 | CVE-2019-0285 | 10 Apr 201920:26 | – | cve |
 | CVE-2019-0285 | 10 Apr 201920:26 | – | cvelist |
 | EUVD-2019-1058 | 7 Oct 202500:30 | – | euvd |
 | SAP Crystal Reports - Information Disclosure | 1 Jul 201900:00 | – | exploitpack |
 | CVE-2019-0285 | 10 Apr 201921:29 | – | nvd |
 | CVE-2019-0285 | 10 Apr 201921:29 | – | osv |
 | SAP Crystal Reports Information Disclosure | 1 Jul 201900:00 | – | packetstorm |
10
# Exploit Title: [Sensitive Information Disclosure in SAP Crystal Reports]
# Date: [2019-04-10]
# Exploit Author: [Mohamed M.Fouad - From SecureMisr Company]
# Vendor Homepage: [https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114]
# Version: [SAP Crystal Reports for Visual Studio, Version - 2010] (REQUIRED)
# Tested on: [Windows 10]
# CVE : [CVE-2019-0285]
POC:
1- Intercept the "Export" report http request
2- Copy the "__CRYSTALSTATE" + <crystal report user control> Viewer name parameter value.
3- You will find a base64 value in "viewerstate" attribute.
4- decode the value you will get database information such as: name, credentials, Internal Path disclosure and some debugging information.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Jul 2019 00:00Current
9.8High risk
Vulners AI Score9.8
CVSS 25
CVSS 39.8
EPSS0.06609