SAP Crystal Reports - Information Disclosure
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | SAP Crystal Reports - Information Disclosure Vulnerability | 2 Jul 201900:00 | – | zdt |
 | .NET SDK WebForm Viewer Disclosure | 11 Jul 201900:00 | – | bdu_fstec |
 | SAP Crystal Reports for Visual Studio Information Disclosure Vulnerability | 11 Apr 201900:00 | – | cnvd |
 | CVE-2019-0285 | 10 Apr 201920:26 | – | cve |
 | CVE-2019-0285 | 10 Apr 201920:26 | – | cvelist |
 | SAP Crystal Reports - Information Disclosure | 1 Jul 201900:00 | – | exploitdb |
 | EUVD-2019-1058 | 7 Oct 202500:30 | – | euvd |
 | CVE-2019-0285 | 10 Apr 201921:29 | – | nvd |
 | CVE-2019-0285 | 10 Apr 201921:29 | – | osv_cve |
 | SAP Crystal Reports Information Disclosure | 1 Jul 201900:00 | – | packetstorm |
10
# Exploit Title: [Sensitive Information Disclosure in SAP Crystal Reports]
# Date: [2019-04-10]
# Exploit Author: [Mohamed M.Fouad - From SecureMisr Company]
# Vendor Homepage: [https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114]
# Version: [SAP Crystal Reports for Visual Studio, Version - 2010] (REQUIRED)
# Tested on: [Windows 10]
# CVE : [CVE-2019-0285]
POC:
1- Intercept the "Export" report http request
2- Copy the "__CRYSTALSTATE" + <crystal report user control> Viewer name parameter value.
3- You will find a base64 value in "viewerstate" attribute.
4- decode the value you will get database information such as: name, credentials, Internal Path disclosure and some debugging information.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Jul 2019 00:00Current
9.5Critical risk
Vulners AI Score9.5
EPSS0.06609