medium5.0
CVE-2015-2076
The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395.
Impact
The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Businessobjects Edge | Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/130523/SAP-Business-Objects-Unauthorized-Audit-Information-Access.html
- http://seclists.org/fulldisclosure/2015/Feb/94
- http://www.securityfocus.com/archive/1/534750/100/0/threaded
- http://www.securityfocus.com/bid/72775
- http://packetstormsecurity.com/files/130523/SAP-Business-Objects-Unauthorized-Audit-Information-Access.html
- http://seclists.org/fulldisclosure/2015/Feb/94
- http://www.securityfocus.com/archive/1/534750/100/0/threaded
- http://www.securityfocus.com/bid/72775