CVE-2022-29619 — Incorrect Authorization in SE SAP Businessobjects Business Intelligence Platform

CWE-863 — Incorrect Authorization3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 60.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Businessobjects Business Intelligence PlatformSAP Businessobjects Business Intelligence Platform
Timeline
PublishedJul 12
Latest updateJul 13

Description

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of objects it doesn't own and which would otherwise be restricted.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:NExploitability: 1.2 | Impact: 5.2

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-6qc9-pvx9-9h7m: Under certain conditions SAP BusinessObjects Business Intelligence Platform 4↗2022-07-13
▶
CVEList
CVE-2022-29619: Under certain conditions SAP BusinessObjects Business Intelligence Platform 4↗2022-07-12
▶
CVE-2022-29619 — Incorrect Authorization | cvebase