CVE-2022-35228

8.8HIGH

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses

Опубликовано: 7/12/2022Обновлено: 11/21/2024
Посмотреть на NVDПосмотреть на MITRE

Описание

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.

ИИ-АнализНа базе ИИ

Затронутые продукты

sapbusinessobjects_business_intelligence_platform
420
sapbusinessobjects_business_intelligence_platform
430

Ссылки