Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2024-34684

Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling)

Description

On Unix, SAP BusinessObjects Business Intelligence Platform (Scheduling) allows an authenticated attacker with administrator access on the local server to access the password of a local account. As a result, an attacker can obtain non-administrative user credentials, which will allow them to read or modify the remote server files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BusinessObjects Business Intelligence Platform

Default version status: unaffected

  • ENTERPRISE 420affected
  • 430affected
  • 440affected

References