Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2023-37490

Binary hijack in SAP BusinessObjects Business Intelligence (Installer)

Description

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the confidentiality, integrity, and availability of the system

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BusinessObjects Business Intelligence (Installer)

Default version status: unaffected

  • 420affected
  • 430affected

References