CVE-2024-34684: Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling)
On Unix, SAP BusinessObjects Business Intelligence Platform (Scheduling) allows an authenticated attacker with administrator access on the local server to access the password of a local account. As a result, an attacker can obtain non-administrative user credentials, which will allow them to read or modify the remote server files.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34684?
CVE-2024-34684 has been classified as a high severity vulnerability due to its potential for critical information exposure.
How do I fix CVE-2024-34684?
To fix CVE-2024-34684, apply the latest security patches provided by SAP for the affected BusinessObjects Business Intelligence Platform versions.
Who is affected by CVE-2024-34684?
CVE-2024-34684 affects users with administrator access on local servers running SAP BusinessObjects Business Intelligence Platform versions 420, 430, and 440.
What type of vulnerability is CVE-2024-34684?
CVE-2024-34684 is a local privilege escalation vulnerability that allows access to sensitive information.
What are the implications of CVE-2024-34684?
Exploitation of CVE-2024-34684 can lead to unauthorized access to non-administrative user credentials, potentially compromising user accounts.