Business Objects WebIntelligence protection bypass
Published:		17.09.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4018
Type:		remote
Level:		5/10
Description:		Access control is implemented on the client-side by only displaying the permitted actions in the browser.

Affected:		BUSINESSOBJECTS : WebIntelligence 2.7
		BUSINESSOBJECTS : Business Objects 5.1

Original document		advisories, [Full-Disclosure] Corsaire Security Advisory - Business Objects WebIntelligence XSS issue (17.09.2004)
		advisories, [Full-Disclosure] Corsaire Security Advisory - Business Objects WebIntelligence arbitrary document deletion issue (17.09.2004)

Discuss:

Read or add your comments to this news (0 comments)