CVE-2024-45281: DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform
SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The attacker needs to have local access to the vulnerable system to perform DLL related tasks. This could result in a high impact on confidentiality and integrity of the application.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45281?
CVE-2024-45281 is classified as a high severity vulnerability.
How do I fix CVE-2024-45281?
To fix CVE-2024-45281, apply the latest security patches released by SAP for the BusinessObjects Business Intelligence Platform.
Who is affected by CVE-2024-45281?
CVE-2024-45281 affects users of the SAP BusinessObjects Business Intelligence Platform who have high privilege access.
What are the consequences of exploiting CVE-2024-45281?
Exploiting CVE-2024-45281 could allow an attacker to run unverified client desktop applications on the vulnerable system.
What type of access does an attacker need for CVE-2024-45281?
An attacker needs local access to the vulnerable system to exploit CVE-2024-45281.