CVE-2025-0064CWE-732

Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)

High · published February 11, 2025

CVSS v3.1
8.7
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00376 · 30.4th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-02-11T00:33Z
EPSS history
Timeline
  • 11 FEB 00:33Z
    Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)
    cvelistv5