CVE-2023-37490CWE-427

Binary hijack in SAP BusinessObjects Business Intelligence (Installer)

High · published August 8, 2023

CVSS v3.1
7.6
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the confidentiality, integrity, and availability of the system

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.5th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-08-08T00:46Z
EPSS history
Timeline
  • 08 AUG 00:46Z
    Binary hijack in SAP BusinessObjects Business Intelligence (Installer)
    cvelistv5