The User & Server configuration, InfoView refresh, user rights (BI-BIP-ADM) component in SAP Business Intellignece allows remote attackers to obtain audit event details via unspecified vectors.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.