Vulners
Lucene search
SAP Crystal Reports Information Disclosure
🗓️ 01 Jul 2019 00:00:00Reported by Mohamed M.FouadType 
packetstorm🔗 packetstormsecurity.com👁 97 Views
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | SAP Crystal Reports - Information Disclosure Vulnerability | 2 Jul 201900:00 | – | zdt |
 | The vulnerability of the .NET SDK WebForm Viewer component, a software tool for report development with SAP Crystal Reports for Visual Studio, allows attackers to disclose protected information. | 11 Jul 201900:00 | – | bdu_fstec |
 | SAP Crystal Reports for Visual Studio Information Disclosure Vulnerability | 11 Apr 201900:00 | – | cnvd |
 | CVE-2019-0285 | 10 Apr 201920:26 | – | cve |
 | CVE-2019-0285 | 10 Apr 201920:26 | – | cvelist |
 | SAP Crystal Reports - Information Disclosure | 1 Jul 201900:00 | – | exploitdb |
 | EUVD-2019-1058 | 7 Oct 202500:30 | – | euvd |
 | SAP Crystal Reports - Information Disclosure | 1 Jul 201900:00 | – | exploitpack |
 | CVE-2019-0285 | 10 Apr 201921:29 | – | nvd |
 | CVE-2019-0285 | 10 Apr 201921:29 | – | osv |
10
`# Exploit Title: [Sensitive Information Disclosure in SAP Crystal Reports]
# Date: [2019-04-10]
# Exploit Author: [Mohamed M.Fouad - From SecureMisr Company]
# Vendor Homepage: [https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114]
# Version: [SAP Crystal Reports for Visual Studio, Version - 2010] (REQUIRED)
# Tested on: [Windows 10]
# CVE : [CVE-2019-0285]
POC:
1- Intercept the "Export" report http request
2- Copy the "__CRYSTALSTATE" + <crystal report user control> Viewer name parameter value.
3- You will find a base64 value in "viewerstate" attribute.
4- decode the value you will get database information such as: name, credentials, Internal Path disclosure and some debugging information.
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Jul 2019 00:00Current
9.7High risk
Vulners AI Score9.7
EPSS0.06609