|
Business Objects WebIntelligence Access Control Bypass File Deletion Vulnerability
It is reported that WebIntelligence is susceptible to an access control bypass vulnerability allowing for the deletion of files from the application. This vulnerability is reported to exist as access controls are only enforced on the client. The server fails to enforce access control restriction and allows delete requests to succeed when they are not authorized. Only authenticated users are able to exploit this vulnerability. |
|
 Privacy Statement |
