SAP Business Objects Business Intelligence Platform Insecure Session Management Vulnerability

An insecure session management vulnerability exists in SAP Business Objects Business Intelligence Platform. This vulnerability allows an unauthenticated attacker to obtain and reuse valid session tokens, potentially gaining unauthorized access to a victim's session. If the application accepts previously issued tokens after authentication, the attacker could exploit this to access or modify information within the victim's session, thereby impacting confidentiality and integrity.

Impact

Exploitation of this vulnerability could lead to unauthorized access to a user's session, allowing an attacker to access or modify information within that session's scope.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform.