SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege to read and decrypt LCMBIAR file's password under certain conditions, enabling the attacker to modify the password or import the file into another system causing high impact on confidentiality but a limited impact on the availability and integrity of the application.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/3194361 | Permissions Required Vendor Advisory |
| https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Jul 2022, 18:10
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 6.0 |
| First Time |
Sap
Sap businessobjects Business Intelligence Platform |
|
| CPE | cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:*:*:*:* cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:* |
|
| References | (MISC) https://launchpad.support.sap.com/#/notes/3194361 - Permissions Required, Vendor Advisory | |
| References | (MISC) https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory |
12 Jul 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-12 21:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-35169
Mitre link : CVE-2022-35169
CVE.ORG link : CVE-2022-35169
JSON object : View
Products Affected
sap
- businessobjects_business_intelligence_platform
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor