CVE-2022-35228

8.8HIGH

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses

게시됨: 7/12/2022업데이트됨: 11/21/2024
NVD에서 보기MITRE에서 보기

설명

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.

AI 분석AI 기반

영향받는 제품

sapbusinessobjects_business_intelligence_platform
420
sapbusinessobjects_business_intelligence_platform
430

참조