SAP BusinessObjects BI Suite Client CVE-2018-2471 Information Disclosure Vulnerability

Bugtraq ID:	105530
Class:	Input Validation Error
CVE:	CVE-2018-2471
Remote:	Yes
Local:	No
Published:	Oct 09 2018 12:00AM
Updated:	Oct 09 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	SAP BusinessObjects BI Platform 4.2 SAP BusinessObjects BI Platform 4.1
Not Vulnerable:

SAP BusinessObjects BI Suite Client CVE-2018-2471 Information Disclosure Vulnerability

SAP BusinessObjects BI Suite Client is prone to an information disclosure vulnerability.

An attacker can exploit this issue to gain sensitive information, that may aid in further attacks.

SAP BusinessObjects Business Intelligence Platform 4.1, and 4.2 are vulnerable.

SAP BusinessObjects BI Suite Client CVE-2018-2471 Information Disclosure Vulnerability

Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

SAP BusinessObjects BI Suite Client CVE-2018-2471 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SAP BusinessObjects BI Suite Client CVE-2018-2471 Information Disclosure Vulnerability

References:

• SAP Homepage (SAP)
  
• SAP Security Note #2654905 (SAP)
  
• SAP Security Patch Day �?? October 2018 (SAP)