Vulnerabilities > CVE-2023-37490 - Unspecified vulnerability in SAP Businessobjects Business Intelligence 420/430

047910
CVSS 9.0 - CRITICAL
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
sap
critical

Summary

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the confidentiality, integrity, and availability of the system

Vulnerable Configurations

Part Description Count
Application
Sap
2