Information Disclosure in SAP BusinessObjects Intelligence Platform

CVE-2023-28762

What is CVE-2023-28762?

An attacker with administrator privileges on SAP BusinessObjects Business Intelligence Platform versions 420 and 430 can exploit this vulnerability to capture the login tokens of any active user on the platform. This unauthorized access enables the attacker to impersonate the user, potentially allowing them to manipulate or access sensitive data without user consent. Furthermore, this exploitation could lead to denial of service where the system becomes partially or totally unavailable, disrupting normal operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References