CVE-2022-39013 — Sensitive Information Exposure in SE SAP Businessobjects Business Intelligence Platform

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
7.6HIGHNVD
EPSS
0.5%
top 34.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Businessobjects Business Intelligence PlatformSAP Business Objects Business Intelligence Platform
Timeline
PublishedOct 11
Latest updateOct 12

Description

Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system data and make the system unavailable leading to high impact on confidentiality and low impact on integrity and availability of the application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:LExploitability: 2.8 | Impact: 4.7

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-hjmr-8x7c-687c: Under certain conditions an authenticated attacker can get access to OS credentials↗2022-10-12
▶
CVEList
CVE-2022-39013: Under certain conditions an authenticated attacker can get access to OS credentials↗2022-10-11
▶
CVE-2022-39013 — Sensitive Information Exposure | cvebase