CVE-2022-35228

8.8HIGH

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses

公開日: 7/12/2022更新日: 11/21/2024
NVDで表示MITREで表示

説明

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.

AI分析AIによる分析

影響を受ける製品

sapbusinessobjects_business_intelligence_platform
420
sapbusinessobjects_business_intelligence_platform
430

参照