SAP Crystal Reports Server OEM Edition Local Elevation of Privilege Vulnerability

SAP Crystal Reports Server OEM Edition CRSE is a reporting solution from SAP. It enables the creation of richly formatted reports using what-if scenario models, interactive business dashboards, and charts, which can be delivered via the Web, e-mail, Microsoft Office, Adobe PDF, or embedded in...

CVE-2018-2406

Unquoted windows search path directory/path traversal vulnerability in Crystal Reports Server, OEM Edition CRSE, 4.0, 4.10, 4.20, 4.30, startup path...

CVE-2018-2406

CVE-2018-2406 affects SAP Crystal Reports Server OEM Edition (CRSE) startup path: unquoted Windows search path leads to local directory/path traversal. Versions 4.0, 4.10, 4.20, 4.30 are affected; local privilege elevation is indicated in connected CNVD entry. The vulnerability’s CVSS notes local...