critical9.8Public exploit code
CVE-2019-0285
The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials whi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SAP Crystal Reports - Information Disclosure2019-07-01 · webapps · multiple
Impact
The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Crystal Reports | Version 2010 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153471/SAP-Crystal-Reports-Information-Disclosure.html
- https://launchpad.support.sap.com/#/notes/2687663
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114
- http://packetstormsecurity.com/files/153471/SAP-Crystal-Reports-Information-Disclosure.html
- https://launchpad.support.sap.com/#/notes/2687663
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114