PT-2003-2194 · Sap · Sap Business Objects Web Intelligence

Published 2003-12-31 · Updated 2008-09-05 · CVE-2003-1249

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects WebIntelligence version 2.7.1

Description The issue allows remote attackers to hijack sessions due to the use of guessable user session cookies.

Recommendations For version 2.7.1, consider regenerating session cookies with a secure randomization mechanism to prevent session hijacking until a patch is available.

Fix

Related Identifiers

CVE-2003-1249

Affected Products

Sap Business Objects Web Intelligence

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2003-1249 · Security Note
• http://securityfocus.com/bid/6569 · Patch
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0014.html · Vendor Advisory
• http://securityfocus.com/archive/1/305991 · Vendor Advisory
• http://iss.net/security_center/static/11026.php · Note
• http://securitytracker.com/id?1005906 · Note
• http://secunia.com/advisories/7846 · Note