CVE-2022-39013

2022-10-1121:15:13

CWE-200

[email protected]

web.nvd.nist.gov

cve-2022-39013

os credentials

confidentiality impact

integrity impact

availability impact

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

EPSS

0.001

Percentile

39.6%

JSON

Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system data and make the system unavailable leading to high impact on confidentiality and low impact on integrity and availability of the application.

Affected configurations

Nvd

Node

sapbusiness_objects_business_intelligence_platformMatch420

sapbusiness_objects_business_intelligence_platformMatch430

VendorProductVersionCPE
sapbusiness_objects_business_intelligence_platform420cpe:2.3:a:sap:business_objects_business_intelligence_platform:420:*:*:*:*:*:*:*
sapbusiness_objects_business_intelligence_platform430cpe:2.3:a:sap:business_objects_business_intelligence_platform:430:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sap	business_objects_business_intelligence_platform	420	cpe:2.3:a:sap:business_objects_business_intelligence_platform:420:::::::*
sap	business_objects_business_intelligence_platform	430	cpe:2.3:a:sap:business_objects_business_intelligence_platform:430:::::::*