SAP Knowledge Base Article - Preview

3400455 - SAP BI 4.2 Vulnerability Scan reported CVE-2010-3982

Symptom

SAP BI 4.2 Vulnerability Scan reported CVE-2010-3982

According to CVE-2010-3982, SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning" issue.


Read more...

Environment

SAP BusinessObjects BI 4.2, 4.3 &above
All supported OS platforms
Tomcat 8

Product

SAP BusinessObjects Business Intelligence platform 4.2 ; SAP BusinessObjects Business Intelligence platform 4.3

Keywords

CVE-2010-3982 XI 3.1 BI 4.2 4.3 not impacted , KBA , BI-BIP-SEC , Security Vulnerabilities in SAP BusinessObjects , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.