CVE-2019-0352

Published: Sep 10, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.

Affected (3)

Products: Sap: Businessobjects Business Intelligence Platform

Sap

1 product

Businessobjects Business Intelligence Platform

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Sap Businessobjects Business Intelligence Platform	Version 4.10
Sap Businessobjects Business Intelligence Platform	Version 4.20
Sap Businessobjects Business Intelligence Platform	Version 4.30