CVE-2024-37179 — Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file…
Published: 2024-10-08 · CVSS: 7.7 · CVSS 3.1
SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7