CVE:CVE-2019-11628
CNNVD:CNNVD-201904-1399
QlikView Server、Qlik Sense Enterprise和Qlik Analytics Platform中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。以下产品及版本受到影响：QlikView Server 11.20 SR19之前版本，12.10 SR11之前的12.00版本和12.10版本，12.20 SR9之前的12.20版本，12.30 SR2之前的12.30版本；Qlik Sense Enterprise 2018-1 Patch 4之前版本，2018-4 Patch 3之前版本，2018-6 Patch 3之前版本，2018-9 Patch 4之前版本，2018-11 Patch 4之前版本，2019-2 Patch 2之前版本；Qlik Analytics Platform 2018-1 Patch 4之前版本，2018-4 Patch 3之前版本，2018-6 Patch 3之前版本，2018-9 Patch 4之前版本，2018-11 Patch 4之前版本，2019-2 Patch 2之前版本。
solution:Upgrade qlik qlikview_server to a higher version than 11.20:service_release_1,11.20:service_release_10,11.20:service_release_11,11.20:service_release_12,11.20:service_release_13,11.20:service_release_14,11.20:service_release_15,11.20:service_release_16,11.20:service_release_17,11.20:service_release_2,11.20:service_release_3,11.20:service_release_4,11.20:service_release_5,11.20:service_release_6,11.20:service_release_7,11.20:service_release_8,11.20:service_release_9,12.00,12.10:service_release_1,12.10:service_release_2,12.10:service_release_3,12.10:service_release_4,12.10:service_release_5,12.10:service_release_6,12.10:service_release_7,12.10:service_release_8,12.10:service_release_9,12.20:service_release_1,12.20:service_release_2,12.20:service_release_3,12.20:service_release_4,12.30:service_release_1,and avoid the version 11.20:service_release_1,11.20:service_release_10,11.20:service_release_11,11.20:service_release_12,11.20:service_release_13,11.20:service_release_14,11.20:service_release_15,11.20:service_release_16,11.20:service_release_17,11.20:service_release_2,11.20:service_release_3,11.20:service_release_4,11.20:service_release_5,11.20:service_release_6,11.20:service_release_7,11.20:service_release_8,11.20:service_release_9,12.00,12.10:service_release_1,12.10:service_release_2,12.10:service_release_3,12.10:service_release_4,12.10:service_release_5,12.10:service_release_6,12.10:service_release_7,12.10:service_release_8,12.10:service_release_9,12.20:service_release_1,12.20:service_release_2,12.20:service_release_3,12.20:service_release_4,12.30:service_release_1; Upgrade qlik qlik_analytics to a higher version than april_2018,february_2018,february_2019,june_2017,june_2018,november_2017,november_2018,september_2017,september_2018,and avoid the version april_2018,february_2018,february_2019,june_2017,june_2018,november_2017,november_2018,september_2017,september_2018; Upgrade qlik qlik_sense to a higher version than april_2018,february_2018,february_2019,june_2017,june_2018,november_2017,november_2018,september_2017,september_2018,and avoid the version april_2018,february_2018,february_2019,june_2017,june_2018,november_2017,november_2018,september_2017,september_2018