CVE-2024-33004: Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)
SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see the sensitive information through cache and can open the pages causing limited impact on Confidentiality, Integrity and Availability of the application.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33004?
CVE-2024-33004 is classified with a limited impact due to insecure storage issues in SAP Business Objects Business Intelligence Platform.
How do I fix CVE-2024-33004?
To fix CVE-2024-33004, implement proper cache control mechanisms to ensure that sensitive data is not cached after user logout.
What data is at risk with CVE-2024-33004?
CVE-2024-33004 exposes sensitive user information through cached dynamic web pages after logging out.
Who is affected by CVE-2024-33004?
CVE-2024-33004 affects users of the SAP Business Objects Business Intelligence Platform.
What can attackers do with CVE-2024-33004?
Attackers exploiting CVE-2024-33004 can access sensitive information through cached web pages even after legitimate users have logged out.