Description
Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP BusinessObjects Business Intelligence platform (Central Management Console) | ENTERPRISE 430, 2025 | — |
Advisories 4
- NCSC-2025-0119 Kwetsbaarheden verholpen in SAP-producten NCSC-NL (Netherlands) · Apr 30, 2025
- WID-SEC-2025-0719 SAP Patchday April 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 24, 2025
- NCSC-2025-0045 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Feb 11, 2025
- WID-SEC-2025-0307 SAP Patchday Februar 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 10, 2025