PT-2022-24670 · Sap · Sap Businessobjects Business Intelligence Platform Central Management Console

Published 2022-09-13 · Updated 2022-10-01 · CVE-2022-39014

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) version 430

Description The issue allows an attacker to access certain unencrypted sensitive parameters under certain conditions, which would otherwise be restricted.

Recommendations For SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) version 430, consider restricting access to sensitive parameters until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2022-39014

Affected Products

Sap Businessobjects Business Intelligence Platform Central Management Console

References · 8

• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39014 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39014 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/3217303 · Vendor Advisory
• https://t.me/cvenotify/36248 · Telegram Post
• https://t.me/cvenotify/36103 · Telegram Post
• https://t.me/cibsecurity/49669 · Telegram Post
• https://t.me/true_secator/3432 · Telegram Post