Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-0064

Опубликовано: 11 фев. 2025
Источник: nvd
CVSS3: 8.7
CVSS3: 6.5
EPSS Низкий

Описание

Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:enterprise:*:*:*
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:-:*:*:*

EPSS

Процентиль: 30%
0.00114
Низкий

8.7 High

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 8.7
github
12 месяцев назад

Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.

EPSS

Процентиль: 30%
0.00114
Низкий

8.7 High

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-732