Server side request forgery (ssrf)

2018-08-1416:29:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability.

CPENameOperatorVersion
businessobjects_business_intelligenceeq4.2
businessobjects_business_intelligenceeq4.1

CPE	Name	Operator	Version
	businessobjects_business_intelligence	eq	4.2
	businessobjects_business_intelligence	eq	4.1

References

www.securityfocus.com/bid/105064

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742