SAP Knowledge Base Article - Preview

1218305 - Physical file path appears if invalid ID parameter value used in URL request

Symptom

The ID parameter value in a URL request is set to non-numeric characters. For example:

HTTP://server/crystal/enterprise/ePortfolio/en/viewrpt.cwr?id=16ABC

When the URL request is processed, a security issue arises because an error message appears that contains the full physical path to the report file. For example:

"File C:\Program Files\Crystal Decisions\Web Content\enterprise\ePortfolio\en\IDontExist.rpt not found. [On Cache/Page Server: PS02.pageserver]"


Read more...

Product

Crystal Enterprise 10

Keywords

CE WHF 376015 FULL LOCATION DISPLAYS ALPHANUMERIC ALPHA NUMERIC Crystal Enterprise URL Request ID Parameter Invalid Value , c2017023 , KBA , BI-BIP , Business intelligence platform , Bug Filed

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.