CVE-2024-45281: DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform
First published: Tue Sep 10 2024(Updated: )
SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The attacker needs to have local access to the vulnerable system to perform DLL related tasks. This could result in a high impact on confidentiality and integrity of the application.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP BusinessObjects Business Intelligence Platform |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-45281?
CVE-2024-45281 is classified as a high severity vulnerability.
How do I fix CVE-2024-45281?
To fix CVE-2024-45281, apply the latest security patches released by SAP for the BusinessObjects Business Intelligence Platform.
Who is affected by CVE-2024-45281?
CVE-2024-45281 affects users of the SAP BusinessObjects Business Intelligence Platform who have high privilege access.
What are the consequences of exploiting CVE-2024-45281?
Exploiting CVE-2024-45281 could allow an attacker to run unverified client desktop applications on the vulnerable system.
What type of access does an attacker need for CVE-2024-45281?
An attacker needs local access to the vulnerable system to exploit CVE-2024-45281.
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/severity
- agent/weakness
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap businessobjects business intelligence platform