Description
In SAP BusinessObjects Business Intelligence - version 420, If a user logs in to a particular program, under certain specific conditions memory might not be cleared up properly, due to which attacker might be able to get access to user credentials. For a successful attack, the attacker needs to have local access to the system. There is no impact on availability and integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP BusinessObjects Business Intelligence | 430 | — |
Advisories 1
- WID-SEC-2023-1980 SAP Patchday August 2023 BSI CERT-Bund (WID) · Aug 7, 2023