Authentication flaw

2020-05-1218:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

JSON

SAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an attacker to logon on the Central Management Console without password in case of the BIPRWS application server was not protected with some specific certificate, leading to Missing Authentication Check.

CPENameOperatorVersion
businessobjects_business_intelligence_platformeq1.0
businessobjects_business_intelligence_platformeq2.0
businessobjects_business_intelligence_platformeq2.1
businessobjects_business_intelligence_platformeq2.2
businessobjects_business_intelligence_platformeq2.3

Name	Operator	Version
businessobjects_business_intelligence_platform	eq	1.0
businessobjects_business_intelligence_platform	eq	2.0
businessobjects_business_intelligence_platform	eq	2.1
businessobjects_business_intelligence_platform	eq	2.2
businessobjects_business_intelligence_platform	eq	2.3