Unauthenticated Token Retrieval Vulnerability in SAP BusinessObjects CMC

CVE-2022-35228

What is CVE-2022-35228?

SAP BusinessObjects CMC has a vulnerability that allows unauthenticated attackers to retrieve sensitive token information over the network. This exploitation occurs when a legitimate user is interacting with the application, creating an opportunity for local compromise through methods such as network sniffing or social engineering attacks. If successfully exploited, the attacker gains the ability to completely compromise the SAP BusinessObjects CMC application, posing a significant risk to the security of the system.

References