CVE-2018-2458

Description

Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted.

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993

https://launchpad.support.sap.com/#/notes/2670284

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-14313

http://www.securityfocus.com/bid/105307

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS