CyberRota Analysis
AI-GeneratedThe SAP BusinessObjects Business Intelligence Platform is vulnerable due to the storage of sensitive credentials using a hard-coded cryptographic key, which can be exploited by an attacker with high privileges and local server access. This allows the attacker to decrypt and retrieve sensitive authentication data, potentially compromising confidentiality and integrity of protected information. Organizations using this platform should prioritize addressing this vulnerability to mitigate the risks associated with unauthorized access and data manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high privileges and local access to the server could retrieve these objects and decrypt the stored credentials. Successful exploitation could allow the attacker to obtain sensitive authentication data and modify protected information, resulting in a high impact on confidentiality and integrity. There is no impact on availability.