CVE-2019-0352: Infoleak
In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0352?
CVE-2019-0352 has a medium severity rating due to the risk of exposing sensitive information through cached pages.
How do I fix CVE-2019-0352?
To fix CVE-2019-0352, you should upgrade your SAP Business Objects Business Intelligence Platform to version 4.1, 4.2, or 4.3.
What impact does CVE-2019-0352 have on SAP Business Intelligence Platform?
CVE-2019-0352 can allow unauthorized users to access sensitive information that is cached in dynamic pages.
Is CVE-2019-0352 exploitable remotely?
Yes, CVE-2019-0352 can be exploited remotely by attackers to access cached pages containing sensitive data.
Which versions of SAP Business Objects are affected by CVE-2019-0352?
CVE-2019-0352 affects SAP Business Objects Business Intelligence Platform versions 4.10, 4.20, and 4.30.