CVE-2024-37179: Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37179?
CVE-2024-37179 is considered high severity due to its potential impact on the confidentiality of the application.
How do I fix CVE-2024-37179?
To fix CVE-2024-37179, apply the latest security patches provided by SAP for the affected versions of the BusinessObjects Business Intelligence Platform.
Who is affected by CVE-2024-37179?
CVE-2024-37179 affects authenticated users of SAP BusinessObjects Business Intelligence Platform versions 420, 430, and 2025.
What vulnerabilities does CVE-2024-37179 exploit?
CVE-2024-37179 exploits a flaw that allows users to send specially crafted requests to download any file from the server hosting the service.
What should I do if I suspect exploitation of CVE-2024-37179?
If you suspect exploitation of CVE-2024-37179, immediately review access logs, restrict user permissions, and implement the recommended patches.