CVE-2022-35228

CVE-2022-35228

Vendor Sap Se
Product SAP BusinessObjects Business Intelligence Platform (Central management Console)
Weakness CWE-352 · CSRF
Published July 12, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.

Key dates

02Disclosure timeline

July 12, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE