SAP BusinessObjects Business Intelligence Platform Insufficient CSRF Protection Vulnerability

A vulnerability exists in SAP BusinessObjects Business Intelligence Platform due to inadequate Cross-Site Request Forgery (CSRF) protection. This flaw allows an authenticated user to be manipulated by an attacker into sending unintended requests to the web server. While this vulnerability has a low impact on the application's integrity and availability, it does not affect data confidentiality.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the user, potentially disrupting application availability or integrity.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform.