Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.
2025-02-11T01:15:09.803
2025-10-23T18:41:05.110
Analyzed
CVSSv3.1: 8.7 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | sap | businessobjects_business_intelligence_platform | 430 | Yes |
| Application | sap | businessobjects_business_intelligence_platform | 2025 | Yes |