Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-0333

In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2, 4.3, the attacker can then query and recei

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2, 4.3, the attacker can then query and receive the whole data set instead of just what is part of their authorized security profile, resulting in Information Disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP BusinessObjects Business Intelligence Platform (Web Intelligence)

  • < 4.2affected

References