Access Control Vulnerability in SAP BOE AdminTools and BOE SDK
CVE-2022-39015

6.5MEDIUM

Key Information:

Vendor

SAP
Status
SAP Businessobjects Business Intelligence Platform (admintools/query Builder)
Vendor
CVE Published:
11 October 2022

What is CVE-2022-39015?

A vulnerability in SAP BOE AdminTools and BOE SDK may allow attackers to access restricted information under specific conditions. This access, if exploited, can compromise sensitive data integrity and confidentiality, potentially leading to unauthorized data exposure. It is crucial for organizations using these products to implement necessary security measures and monitor for any unusual activity to safeguard against such vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SAP BusinessObjects Business Intelligence Platform (AdminTools/Query Builder) 4.2

SAP BusinessObjects Business Intelligence Platform (AdminTools/Query Builder) 4.3

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-...
https://launchpad.support.sap.com/#/notes/3239293

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.