CVE-2023-31404CWE-200

Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)

Medium · published May 9, 2023

CVSS v3.1
5.0
EPSS
0%
Percentile
39.4
In the wild
Unconfirmed
What it is

Under certain conditions, SAP BusinessObjects Business Intelligence Platform (Central Management Service) - versions 420, 430, allows an attacker to access information which would otherwise be restricted. Some users with specific privileges could have access to credentials of other users. It could let them access data sources which would otherwise be restricted.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00466 · 39.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-05-09T01:37Z
EPSS history
Timeline
  • 09 MAY 01:37Z
    Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)
    cvelistv5