PT-2022-18879 · Sap · Sap Businessobjects Enterprise Xi

Published 2022-05-11 · Updated 2022-05-19 · CVE-2022-28214

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Enterprise, Central Management Server (CMS) versions 420, 430

Description The issue is related to the exposure of authentication credentials in Sysmon event logs during an update of the software. This could have a high impact on systems' Confidentiality, Integrity, and Availability.

Recommendations For versions 420 and 430, consider restricting access to Sysmon event logs to minimize the risk of exploitation. As a temporary workaround, consider disabling the logging of authentication credentials in Sysmon event logs until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2022-28214

Affected Products

Sap Businessobjects Enterprise Xi

References · 5

• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-28214 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28214 · Security Note
• https://launchpad.support.sap.com/#/notes/2998510 · Vendor Advisory
• https://t.me/cibsecurity/42357 · Telegram Post