description: SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the application by an automated attack. Thus, completely compromising confidentiality but causing a limited impact on the availability of the application.
problem types: CWE-319
affected:
{
product: SAP BusinessObjects Business Intelligence Platform (Open Document)
vendor: SAP SE
versions:
status: affected, version: 420
status: affected, version: 430
}