Design/Logic Flaw

2018-08-1416:29:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.1%

JSON

In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid.

CPENameOperatorVersion
businessobjects_business_intelligenceeq4.2
businessobjects_business_intelligenceeq4.1
businessobjects_business_intelligenceeq4.0
internet_graphics_servereq7.20
internet_graphics_servereq7.20.0-ext
internet_graphics_servereq7.45
internet_graphics_servereq7.49
internet_graphics_servereq7.53

Name	Operator	Version
businessobjects_business_intelligence	eq	4.2
businessobjects_business_intelligence	eq	4.1
businessobjects_business_intelligence	eq	4.0
internet_graphics_server	eq	7.20
internet_graphics_server	eq	7.20.0-ext
internet_graphics_server	eq	7.45
internet_graphics_server	eq	7.49
internet_graphics_server	eq	7.53