CVE-2019-0285

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cna@sap.com

Published

2019-04-10

Last modified

2024-08-04

Weaknesses

CWE-312

Affected products

• Crystal Reports (Sap)
• Sap Crystal Reports For Visual Studio (Sap Se)

References

• http://packetstormsecurity.com/files/153471/SAP-Crystal-Reports-Information-Disclosure.html
• https://launchpad.support.sap.com/#/notes/2687663
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114