Description
In SAP BusinessObjects Business Intelligence
Platform, if Single Signed On is enabled on Enterprise authentication, an
unauthorized user can get a logon token using a REST endpoint. The attacker can
fully compromise the system resulting in High impact on confidentiality,
integrity and availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP BusinessObjects Business Intelligence Platform | ENTERPRISE 430, 440 | — |
Advisories 4
- WID-SEC-2024-3093 SAP Software: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 7, 2024
- WID-SEC-2024-2086 SAP Patchday September 2024 BSI CERT-Bund (WID) · Sep 9, 2024
- NCSC-2024-0333 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Aug 13, 2024
- WID-SEC-2024-1818 SAP Security Patch Day – August 2024 BSI CERT-Bund (WID) · Aug 12, 2024