CVE-2017-16683 - Denial of Service (DOS) in SAP Business Objects Platform, Enterprise 4.10 and 4.20, that could allow

CVE-2017-16683

Summary

Denial of Service (DOS) in SAP Business Objects Platform, Enterprise 4.10 and 4.20, that could allow an attacker to prevent legitimate users from accessing a service.

References

http://www.securityfocus.com/bid/102146
https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/
https://launchpad.support.sap.com/#/notes/2531656

Vulnerable Configurations

cpe:2.3:a:sap:businessobjects:4.10:*:*:*:enterprise:*:*:*
cpe:2.3:a:sap:businessobjects:4.10:*:*:*:enterprise:*:*:*
cpe:2.3:a:sap:businessobjects:4.20:*:*:*:enterprise:*:*:*
cpe:2.3:a:sap:businessobjects:4.20:*:*:*:enterprise:*:*:*

CVSS

Base:	4.0 (as of 21-12-2017 - 20:32)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:S/C:N/I:N/A:P

refmap via4

bid	102146
confirm	https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/ https://launchpad.support.sap.com/#/notes/2531656

Last major update

21-12-2017 - 20:32

Published

12-12-2017 - 14:29

Last modified

21-12-2017 - 20:32