CVE-2024-41730

In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can fully compromise the system resulting in High impact on confidentiality, integrity and availability.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@sap.com

Published

2024-08-13

Last modified

2024-08-16

Weaknesses

CWE-862

Affected products

• Business Objects Business Intelligence Platform (Sap)
• Sap Business Objects Business Intgelligence Platform (Sap Se)
• Sap Businessobjects Business Intelligence Platform (Sap Se)

References

• https://me.sap.com/notes/3479478
• https://url.sap/sapsecuritypatchday