SAP BusinessObjects Business Intelligence Platform Session Hijacking Vulnerability

An information disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to hijack sessions over the network without user interaction. This vulnerability enables the attacker to access and modify all application data.

Impact

Exploitation of this vulnerability could lead to unauthorized access and modification of application data, allowing for session hijacking.

Remediation

Users are advised to review and implement the SAP Security Note related to this vulnerability, available through the SAP Security Patch Day Bulletin. For guidance on accessing and applying SAP Security Notes, refer to the SAP Security Notes FAQs.