CVE-2004-0533

Published: Dec 31, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.

Affected (10)

Products: Businessobjects: Infoview, Webintelligence

Businessobjects

2 products

Infoview

Webintelligence

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Businessobjects Infoview	Version 5.1.4
Businessobjects Infoview	Version 5.1.5
Businessobjects Infoview	Version 5.1.6
Businessobjects Infoview	Version 5.1.7
Businessobjects Infoview	Version 5.1.8
Businessobjects Webintelligence	Version 2.7.1
Businessobjects Webintelligence	Version 2.7.2
Businessobjects Webintelligence	Version 2.7.3
Businessobjects Webintelligence	Version 2.7.4
Businessobjects Webintelligence	Version 2.7