PT-2023-21401 · Sap · Sap Businessobjects Business Intelligence Platform

Published 2023-03-14 · Updated 2023-04-11 · CVE-2023-27894

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform (Web Services) versions 420, 430

Description The issue allows an attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful exploitation, the attacker can scan the internal network to determine internal infrastructure for further attacks, such as remote file inclusion, retrieve server files, bypass firewall, and force the vulnerable server to execute malicious requests, resulting in sensitive information disclosure. This causes limited impact on confidentiality of data.

Recommendations For versions 420 and 430, consider restricting access to the CMS parameters to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider disabling the Web Services component until a fix is provided. Restrict access to the internal network to prevent further attacks like remote file inclusion and sensitive information disclosure.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-27894

Affected Products

Sap Businessobjects Business Intelligence Platform

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-27894 · Security Note
• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-27894 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/3287120 · Note
• https://t.me/cibsecurity/59947 · Telegram Post
• https://t.me/cvenotify/47937 · Telegram Post