CVE-2024-34684

Katalog CVE

CVSS 6.0 · Medium EPSS 0,14%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada sap businessobjects business intelligence platform. Skor CVSS 3.1 6.0 (Medium) menurut NVD.

Deskripsi (NVD)

On Unix, SAP BusinessObjects Business Intelligence Platform (Scheduling) allows an authenticated attacker with administrator access on the local server to access the password of a local account. As a result, an attacker can obtain non-administrative user credentials, which will allow them to read or modify the remote server files.

Rincian

Terbit di NVD

11 Juni 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.0 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 3,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html patch · advisory vendor
• https://me.sap.com/notes/3441817 permissions required