CVE-2018-2442

Published: Aug 14, 2018Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid.

Affected (8)

Products: Sap: Businessobjects Business Intelligence, Internet Graphics Server

Sap

2 products

Businessobjects Business Intelligence

Internet Graphics Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Sap Businessobjects Business Intelligence	Version 4.0
Sap Businessobjects Business Intelligence	Version 4.1
Sap Businessobjects Business Intelligence	Version 4.2

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Sap Internet Graphics Server	Version 7.20
Sap Internet Graphics Server	Version 7.20ext
Sap Internet Graphics Server	Version 7.45
Sap Internet Graphics Server	Version 7.49
Sap Internet Graphics Server	Version 7.53