Back to feed
EUVD-2004-0532 · Published Dec 31, 2004
Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.
Technologies
Businessobjects WebintelligenceBusinessobjects Infoview
Weaknesses
NVD-CWE-Other
CVSS scores
- v2.02.1
AV:L/AC:L/Au:N/C:N/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
