RESTON, Va. - January 10, 2003 - Ubizen(r) (Nasdaq Europe: UBIZ - Euronext: UBI), the principal provider of Managed Security Solutions (MSS) for global businesses, today announced that it discovered a security vulnerability with Business Objects' WebIntelligence session ID cookies, giving hackers the ability to access a bona fide user's mail, settings, preferences - potentially even confidential customer data.
Ubizen expert security analysts discovered the vulnerability in October 2002 while performing penetration testing techniques. Ubizen then contacted Business Objects to ensure a patch was issued to customers. This high-risk vulnerability is present in the Business Objects' WebIntelligence product line versions 2.x., WebIntelligence
Business Objects developed a fix for this issue and will release it as part of WebIntelligence Service Pack 7, which will be unveiled early Q2. Until then, users can apply the patches released by Business Objects to secure their system. Current Business Objects customers can learn more about the vulnerability and patch by visiting http://www.techsupport.businessobjects.com/default.asp .
Business Objects is the world's leading provider of business intelligence (BI) solutions.
The company's products include data integration tools, an integrated business intelligence platform, and a suite of enterprise analytic applications. Business Objects offers a complete BI solution that is composed of best-of-breed components, giving organizations the means to deploy end-to-end BI to the enterprise, from data extraction to analytic applications.
About Ubizen
Ubizen is the principal provider of Managed Security Solutions for global businesses. Companies rely on Ubizen OnlineGuardian(r) services for outsourced management, monitoring and support of enterprise security devices 24x7x365. A Professional Services team complements Ubizen OnlineGuardian services, by helping enterprises plan and implement vulnerability assessments, security policies and security infrastructures. Ubizen also protects Web servers against application-level attacks, such as Nimda and Code Red, with Ubizen DMZ/Shield(tm) Enterprise. Founded in 1995, Ubizen monitors 3,000 security devices in over 35 countries worldwide. Ubizen (www.ubizen.com) is a public company with dual listings on Nasdaq Europe (UBIZ) and the Euronext (UBI) exchange.