CVE-2018-2458

Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted.

Date published : 2018-09-11

http://www.securityfocus.com/bid/105307

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993