3467006 - Business Intelligence (BOE BI) No Rate Limit Vulnerability

• Vulnerability: Rate limiting is used to control the amount of incoming and outgoing traffic to or from a network.
• he Rate Limit Filter can help mitigate Denial of Service (DoS) and Brute Force attacks by limiting the number of a requests that are allowed from a single IP address within a time window (also referred to as a time bucket), e.g. 300 Requests per 60 seconds.
• The reason behind implementing rate limits is to allow for a better flow of data and to increase security by mitigating attacks such as DDoS.
• Rate limiting also comes in useful if a particular user on the network makes a mistake in their request, thus asking the server to retrieve tons of information that may overload the network for everyone.
• With rate limiting in place, however, these types of errors or attacks are much more manageable.

• SAP BusinessObjects Business Intelligence Platform
• Tomcat

rate limit vulnerability, tomcat rate limit, request rate limit BI, rate limit BI Platform, application server rate limit , KBA , BI-BIP-SEC , Security Vulnerabilities in SAP BusinessObjects , BI-BIP-DEP , Webapp Deployment, Networking, Vulnerabilities, Webservices , Problem