Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2023-40623

Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)

Description

SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BusinessObjects Suite (Installer)

Default version status: unaffected

  • 420affected
  • 430affected

References