Description
SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP BI Platform | ENTERPRISE 430, 2025, 2027 | — |
Advisories 1
- WID-SEC-2025-1989 SAP Patchday September 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 23, 2025