PT-2003-2194 · Sap · Sap Business Objects Web Intelligence

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1249

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects WebIntelligence version 2.7.1

Description The issue allows remote attackers to hijack sessions due to the use of guessable user session cookies.

Recommendations For version 2.7.1, consider regenerating session cookies with a secure randomization mechanism to prevent session hijacking until a patch is available.

Correção

Identificadores relacionados

CVE-2003-1249

Produtos afetados

Sap Business Objects Web Intelligence

Referências · 7

• http://iss.net/security_center/static/11026.php · Nota
• http://securitytracker.com/id?1005906 · Nota
• http://secunia.com/advisories/7846 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1249 · Nota de Segurança
• http://securityfocus.com/bid/6569 · Correção
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0014.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/305991 · Aviso do Fabricante