CVE-2019-0352

Description

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.281

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-2397,CVE-2018-2471,CVE-2019-0352 are affected in SAP Business Objects Business Intelligence Platform 4.10	Windows
Vulnerabilities CVE-2018-2397,CVE-2018-2471,CVE-2019-0352,CVE-2021-40500 are affected in SAP Business Objects Business Intelligence Platform 4.20	Windows
Vulnerabilities CVE-2018-2397,CVE-2019-0352,CVE-2021-40500 are affected in SAP Business Objects Business Intelligence Platform 4.30	Windows
Vulnerabilities CVE-2018-2397,CVE-2018-2471,CVE-2019-0352 are affected in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) 4.10	Windows
Vulnerabilities CVE-2018-2397,CVE-2018-2471,CVE-2019-0352,CVE-2021-40500 are affected in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) 4.20	Windows
Vulnerabilities CVE-2018-2397,CVE-2019-0352,CVE-2021-40500 are affected in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) 4.30	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234