SAP Crystal Reports Server OEM Edition Local Elevation of Privilege Vulnerability

SAP Crystal Reports Server OEM Edition CRSE is a reporting solution from SAP. It enables the creation of richly formatted reports using what-if scenario models, interactive business dashboards, and charts, which can be delivered via the Web, e-mail, Microsoft Office, Adobe PDF, or embedded in...

CVE-2018-2406

Unquoted windows search path directory/path traversal vulnerability in Crystal Reports Server, OEM Edition CRSE, 4.0, 4.10, 4.20, 4.30, startup path...

CVE-2018-2406

CVE-2018-2406 affects SAP Crystal Reports Server OEM Edition (CRSE) startup path: unquoted Windows search path leads to local directory/path traversal. Versions 4.0, 4.10, 4.20, 4.30 are affected; local privilege elevation is indicated in connected CNVD entry. The vulnerability’s CVSS notes local...

CVE-2018-2406: Unquoted Search Path or Element

Unquoted windows search path directory/path traversal vulnerability in Crystal Reports Server, OEM Edition CRSE, 4.0, 4.10, 4.20, 4.30, startup path...

PT-2018-15537

Name of the Vulnerable Software and Affected Versions Crystal Reports Server, OEM Edition CRSE versions 4.0 through 4.30 Description The issue concerns an unquoted windows search path, also known as a directory/path traversal vulnerability, in the startup path of the affected software...