Description (CNA)
In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP BusinessObjects Business Intelligence Platform (CMC) | affected < 4.1; affected < 4.2; affected < 4.3 |
CWE
No CWE identifiers supplied.
References
- https://launchpad.support.sap.com/#/notes/2735924
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506
ADP enrichment
No English description supplied.