Description (CNA)
Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Business Objects Web Intelligence (BI Launchpad) | affected < 420; affected < 430 |
CWE
No CWE identifiers supplied.
References
- https://launchpad.support.sap.com/#/notes/3044751
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506
ADP enrichment
No English description supplied.