CVE ID | CVE-2014-5506 |
CVSS SCORE | 6.8, AV:N/AC:M/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
SAP |
AFFECTED PRODUCTS |
Crystal Reports |
VULNERABILITY DETAILS |
The specific flaw exists within the handling of RPT files. The issue lies in processing a connection string record. An attacker can leverage this vulnerability to execute code under the context of the current process. |
ADDITIONAL DETAILS |
SAP has issued an update to correct this vulnerability. More details can be found at:
http://service.sap.com/sap/support/notes/1999142 |
DISCLOSURE TIMELINE |
|
CREDIT | Aniway.Anyway@gmail.com |