CVE-2019-0352

2019-09-1016:03:38

sap

www.cve.org

0.002 Low

EPSS

Percentile

55.1%

JSON

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.

CNA Affected

[
  {
    "product": "SAP BusinessObjects Business Intelligence Platform (CMC)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 4.1"
      },
      {
        "status": "affected",
        "version": "< 4.2"
      },
      {
        "status": "affected",
        "version": "< 4.3"
      }
    ]
  }
]

References

launchpad.support.sap.com/#/notes/2735924

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506

0.002 Low

EPSS

Percentile

55.1%

JSON

Related for CVELIST:CVE-2019-0352