What is CVE-2022-35169?

CVE-2022-35169 is a medium-severity vulnerability in SAP Businessobjects Business Intelligence Platform, classified under Information Disclosure. CVSS score: 6.0/10. Published 2022-07-12.

How severe is CVE-2022-35169?

Medium severity. CVSS v3 base score is 6.0 out of 10.

Information disclosure in SAP Businessobjects Business Intelligence Platform

CVE-2022-35169

SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege to read and decrypt LCMBIAR file's password under certain conditions, enabling the attacker to modify the password or import the file into another system causing high impact on confidentiality but a limited impact on the availability and integrity of the application.

Vulnerability class: Information Disclosure

EPSS: 0.006 (46.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L.

Affected products

Sap Businessobjects_business_intelligence_platform — versions 420, 430
Sap Se Businessobjects Business Intelligence Platform (Lcm) — versions 420, 430

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cna@sap.com (x_refsource_MISC, Vendor Advisory)
cna@sap.com (Permissions Required, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-35169?: CVE-2022-35169 is a medium-severity vulnerability in SAP Businessobjects Business Intelligence Platform, classified under Information Disclosure. CVSS score: 6.0/10. Published 2022-07-12.
How severe is CVE-2022-35169?: Medium severity. CVSS v3 base score is 6.0 out of 10.