CVE-2023-28764

CVSS V2 None CVSS V3 None
Description
SAP BusinessObjects Platform - versions 420, 430, Information design tool transmits sensitive information as cleartext in the binaries over the network. This could allow an unauthenticated attacker with deep knowledge to gain sensitive information such as user credentials and domain names, which may have a low impact on confidentiality and no impact on the integrity and availability of the system.
Overview
  • CVE ID
  • CVE-2023-28764
  • Assigner
  • cna@sap.com
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-05-09T01:15:08
  • Last Modified Date
  • 2023-05-09T01:15:08
Weakness Enumerations
CWE URL
CWE-522 http://cwe.mitre.org/data/definitions/522.html
References
Reference URL Reference Tags
https://i7p.wdf.sap.corp/sap/support/notes/3302595
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-28764
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28764
History
Created Old Value New Value Data Type Notes
2023-05-09 02:00:30 Added to TrackCVE
2023-05-09 02:00:31 Weakness Enumeration new