PT-2023-25992 · Sap · Sap Businessobjects Business Intelligence Platform
CVE-2023-37489
·
Publicado
2023-09-11
·
Atualizado
2023-09-14
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SAP BusinessObjects Business Intelligence Platform (Version Management System) version 403
Description
The issue is due to the lack of validation, which allows an unauthenticated user to read code snippets through the UI. This results in a low impact on confidentiality, with no effect on the application's availability or integrity.
Recommendations
For SAP BusinessObjects Business Intelligence Platform (Version Management System) version 403, consider implementing input validation to restrict unauthorized access to code snippets until a patch is available.
Correção
Generation of Error Message Containing Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sap Businessobjects Business Intelligence Platform