SAP Business Objects DS Open Redirection Vulnerability
BID:99143
Info
SAP Business Objects DS Open Redirection Vulnerability
| Bugtraq ID: | 99143 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 20 2017 12:00AM |
| Updated: | Jun 20 2017 12:00AM |
| Credit: | Nursultan Abubakirov (ERPScan) |
| Vulnerable: |
SAP Business Objects DS 4.2 |
| Not Vulnerable: | |
Discussion
SAP Business Objects DS Open Redirection Vulnerability
SAP Business Objects DS is prone to open-redirection vulnerability
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
SAP Business Objects DS 4.2 is vulnerable.
SAP Business Objects DS is prone to open-redirection vulnerability
An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
SAP Business Objects DS 4.2 is vulnerable.
Exploit / POC
SAP Business Objects DS Open Redirection Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
SAP Business Objects DS Open Redirection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
SAP Business Objects DS Open Redirection Vulnerability
References:
References: