CVE-2023-39440CWE-312

Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform

Medium · published August 8, 2023

CVSS v3.1
4.4
EPSS
0%
Percentile
1.6
In the wild
Unconfirmed
What it is

In SAP BusinessObjects Business Intelligence - version 420, If a user logs in to a particular program, under certain specific conditions memory might not be cleared up properly, due to which attacker might be able to get access to user credentials. For a successful attack, the attacker needs to have local access to the system. There is no impact on availability and integrity.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00117 · 1.6th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2023-08-08T00:49Z
EPSS history
Timeline
  • 08 AUG 00:49Z
    Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform
    cvelistv5