Unrated severityNVD Advisory· Published May 9, 2023· Updated Jan 28, 2025
Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)
CVE-2023-31404
Description
Under certain conditions, SAP BusinessObjects Business Intelligence Platform (Central Management Service) - versions 420, 430, allows an attacker to access information which would otherwise be restricted. Some users with specific privileges could have access to credentials of other users. It could let them access data sources which would otherwise be restricted.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.