Default configuration

2014-10-0819:55:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON

The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURE_SECURE_PROCESSING, which allows remote authenticated users to execute arbitrary Java code via a crafted XSL document.

CPENameOperatorVersion
spagobieq5.0

CPE	Name	Operator	Version
	spagobi	eq	5.0

References

spagoworld.org/jira/browse/SPAGOBI-1885

www.securityfocus.com/bid/70240