critical9.8
CVE-2024-41730
In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token …
Impact
In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can fully compromise the system resulting in High impact on confidentiality, integrity and availability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Business Objects Business Intelligence Platform | Versions enterprise_430, enterprise_440 |