Access Control Vulnerability in SAP BOE AdminTools and BOE SDK
CVE-2022-39015

6.5MEDIUM

Key Information:

Vendor
SAP
Status
SAP Businessobjects Business Intelligence Platform (admintools/query Builder)
Vendor
CVE Published:
11 October 2022

Summary

A vulnerability in SAP BOE AdminTools and BOE SDK may allow attackers to access restricted information under specific conditions. This access, if exploited, can compromise sensitive data integrity and confidentiality, potentially leading to unauthorized data exposure. It is crucial for organizations using these products to implement necessary security measures and monitor for any unusual activity to safeguard against such vulnerabilities.

Affected Version(s)

SAP BusinessObjects Business Intelligence Platform (AdminTools/Query Builder) 4.2

SAP BusinessObjects Business Intelligence Platform (AdminTools/Query Builder) 4.3

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-...
https://launchpad.support.sap.com/#/notes/3239293

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.