NetSight
IP …
low2.1

CVE-2004-0533

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary f…

Impact

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.

Affected products

VendorProductAffected versions
BusinessobjectsInfoview
Versions 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8
BusinessobjectsWebintelligence
Versions 2.7, 2.7.1, 2.7.2, 2.7.3, 2.7.4

References