Skip to content
OpenAdvisories
High · 7.6 CVE-2023-37490 EUVD-2023-41377GHSA-r86p-q966-6j9w

Binary hijack in SAP BusinessObjects Business Intelligence (Installer)

Published Aug 8, 2023 · Updated Aug 2, 2024 · Assigned by sap

Description

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the confidentiality, integrity, and availability of the system

Affected products

VendorProductAffectedFixed
SAP_SE SAP BusinessObjects Business Intelligence (Installer) 420, 430 —

Advisories 1

References