Description (CNA)
Improper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI Launchpad/Fiorified BI Launchpad. In case of password change for a user, all other active sessions created using older password continues to be active.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Business Objects | affected 4.00; affected from 4.10; affected from 4.20; affected 4.30 |
CWE
No CWE identifiers supplied.
References
- https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/
- https://launchpad.support.sap.com/#/notes/2537150
- http://www.securityfocus.com/bid/103700
ADP enrichment
No English description supplied.