SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shouldn't or don't need to have access.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/3137191 | Permissions Required Vendor Advisory |
| https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Apr 2022, 13:01
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:* cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 6.5 |
| CWE | NVD-CWE-noinfo | |
| First Time |
Sap
Sap businessobjects Business Intelligence Platform |
|
| References | (MISC) https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory | |
| References | (MISC) https://launchpad.support.sap.com/#/notes/3137191 - Permissions Required, Vendor Advisory |
12 Apr 2022, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-04-12 17:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-22541
Mitre link : CVE-2022-22541
CVE.ORG link : CVE-2022-22541
JSON object : View
Products Affected
sap
- businessobjects_business_intelligence_platform
CWE