Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/3044751 | Permissions Required |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Jul 2021, 16:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://launchpad.support.sap.com/#/notes/3044751 - Permissions Required | |
| References | (MISC) https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 4.3 |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:sap:businessobjects_web_intelligence:430:*:*:*:*:*:*:* cpe:2.3:a:sap:businessobjects_web_intelligence:420:*:*:*:*:*:*:* |
14 Jul 2021, 12:24
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-07-14 12:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-33667
Mitre link : CVE-2021-33667
CVE.ORG link : CVE-2021-33667
JSON object : View
Products Affected
sap
- businessobjects_web_intelligence
CWE