CVE-2024-25646

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-25646
Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application.
CVSS

No CVSS.

References
Link Resource
https://me.sap.com/notes/3421384
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
Configurations

No configuration.

History

28 Sep 2024, 23:15

Type Values Removed Values Added
CWE CWE-200 CWE-732
Summary Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application. Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application.

09 Apr 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-09 01:15

Updated : 2024-09-28 23:15

NVD link : CVE-2024-25646

Mitre link : CVE-2024-25646

JSON object : View

Products Affected

No product.

CWE
CWE-732

Incorrect Permission Assignment for Critical Resource