CVE-2022-35228

8.8HIGH

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses

发布于: 7/12/2022更新于: 11/21/2024
在NVD查看在MITRE查看

描述

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.

AI分析AI驱动

受影响产品

sapbusinessobjects_business_intelligence_platform
420
sapbusinessobjects_business_intelligence_platform
430

参考资料