MicroStrategy Web 10.4 - Information Disclosure Detection

MicroStrategy Web 10.4 is susceptible to information disclosure. The JVM configuration, CPU architecture, installation folder, and other information are exposed through /MicroStrategyWS/happyaxis.jsp. An attacker can use this vulnerability to learn more about the application environment and there...

PT-2020-12616

Name of the Vulnerable Software and Affected Versions Microstrategy Web versions prior to 11.0 Description The issue exposes sensitive information such as JVM configuration, CPU architecture, and installation folder through the API endpoint "/MicroStrategyWS/happyaxis.jsp". This could allow an...

CVE-2020-11453: Server-Side Request Forgery (SSRF)

Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed through the path /MicroStrategyWS/. The functionality requires no authentication and, while it is not possible to pass parameters in the SSRF request, it is still possible to exploit ...