Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Business_one | Sap | 9.2 (including) | 9.2 (including) |
| Business_one | Sap | 9.3 (including) | 9.3 (including) |
References
- http://www.securityfocus.com/bid/105307
- https://launchpad.support.sap.com/#/notes/2670284
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993
- http://www.securityfocus.com/bid/105307
- https://launchpad.support.sap.com/#/notes/2670284
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993