Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Potential information disclosure relating to BI-BIP-ADM, SAP security note 1998990

SAP Note 1998990

SAP security note 1998990, “Potential Information Disclosure in BI-BIP-ADM”, is a note. Below are the symptom and SAP recommended solution.

Description

Symptom

An attacker can discover information related to BI-BIP-ADM. This information could be used to specialize attacks against BI-BIP systems.

Solution

To remediate this issue, install one of the following SAP Support Packages or patches:

  • BI 4.0 Patch 9.1
  • BI 4.0 SP10
  • BI 4.1 SP04

Ensure that you apply the latest patches or support packs available to maintain security and functionality.

CVSS

Score 3.5 Vector: AV:N/AC:M/AU:S/C:P/I:N/A:N

Full note on SAP: SAP Support Launchpad note 1998990

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More