CVE-2024-33004CWE-524

Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)

Medium · published May 14, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
14.9
In the wild
Unconfirmed
What it is

SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see the sensitive information through cache and can open the pages causing limited impact on Confidentiality, Integrity and Availability of the application.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00245 · 14.9th percentile
Weakness
CWE-524 · Use of Cache Containing Sensitive Information
Published
2024-05-14T04:00Z
EPSS history
Timeline
  • 14 MAY 04:00Z
    Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)
    cvelistv5