Unauthorized Access Vulnerability in SAP BusinessObjects Business Intelligence Platform

CVE-2022-31596

Summary

An authenticated attacker with high privileges on the SAP BusinessObjects Business Intelligence Platform can exploit a flaw to gain unauthorized access to the Monitoring database. This could allow them to retrieve and alter non-personal system data that would normally be restricted, potentially leading to integrity issues. Notably, the attack may extend beyond the CMS's scope, impacting the database itself and posing substantial security risks.

References