Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2023-31404

Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)

Description

Under certain conditions, SAP BusinessObjects Business Intelligence Platform (Central Management Service) - versions 420, 430, allows an attacker to access information which would otherwise be restricted. Some users with specific privileges could have access to credentials of other users. It could let them access data sources which would otherwise be restricted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BusinessObjects Business Intelligence Platform (Central Management Service)

Default version status: unaffected

  • 420affected
  • 430affected

References