CVE-2022-29619 - Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of objects it doesn't own and which would otherwise be restricted

Back Back to CVE browser

MEDIUM

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of objects it doesn't own and which would otherwise be restricted

Published Jul 12, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 0.90%

Description

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of objects it doesn't own and which would otherwise be restricted.

Affected products

Vendor SAP SE Product SAP BusinessObjects Business Intelligence Platform Default
n/a
- Version
  420
  Status
  affected
  Constraints
  -
- Version
  430
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SAP SE

SAP BusinessObjects Business Intelligence Platform

n/a

Version	Status	Constraints
420	affected	-
430	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33950
Advisory
https://launchpad.support.sap.com/#/notes/3169239
x_refsource_MISCPermissions RequiredVendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33950		Advisory
https://launchpad.support.sap.com/#/notes/3169239		x_refsource_MISCPermissions RequiredVendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html		x_refsource_MISCVendor Advisory