CVE-2021-33667

4.3MEDIUM

Key Information:

Vendor
SAP
Status
SAP Business Objects Web Intelligence (bi LauncHPad)
Vendor
CVE Published:
14 July 2021

Summary

Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.

Affected Version(s)

SAP Business Objects Web Intelligence (BI Launchpad) < 420 < 420

SAP Business Objects Web Intelligence (BI Launchpad) < 430 < 430

References

https://launchpad.support.sap.com/#/notes/3044751
x_refsource_MISC
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.