Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Improper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI Launchpad/Fiorified BI Launchpad. In case of password change for a user, all other active sessions created using older password continues to be active.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP Business Objects 安全漏洞
Vulnerability Description
SAP Business Objects是德国思爱普（SAP）公司的一套商务智能软件和企业绩效解决方案。该方案提供报表、绩效管理和数据基础等功能。 SAP Business Objects中存在会话固定漏洞，该漏洞源于程序没有正确的管理会话。攻击者可利用该漏洞劫持任意会话，获取受影响软件的未授权访问权限。以下版本受到影响：SAP Business Objects 4.0版本，4.10版本，4.20版本，4.30版本。
CVSS Information
N/A
Vulnerability Type
N/A