CVE-2019-0333

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform (Web Intelligence) versions 4.2, 4.3

Description The issue is related to a lack of protection for internal data in the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform. In certain situations, when a client cancels a query, an attacker can then query and receive the entire data set, instead of just the data that is part of their authorized security profile, resulting in information disclosure. This can allow a remote attacker to gain unauthorized access to protected information.

Recommendations For versions 4.2 and 4.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.