Vulnerability Description
SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see the sensitive information through cache and can open the pages causing limited impact on Confidentiality, Integrity and Availability of the application.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Businessobjects Business Intelligence Platform | 430 |
Related Weaknesses (CWE)
References
- https://me.sap.com/notes/3449093Permissions Required
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.htmlPatch
- https://me.sap.com/notes/3449093Permissions Required
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.htmlPatch
FAQ
What is CVE-2024-33004?
CVE-2024-33004 is a vulnerability with a CVSS score of 4.3 (MEDIUM). SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see t...
How severe is CVE-2024-33004?
CVE-2024-33004 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-33004?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Businessobjects Business Intelligence Platform.