CVE-2024-45281 — DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform

CVE-2024-45281

DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform PUBLISHED

Description (CNA)

SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The attacker needs to have local access to the vulnerable system to perform DLL related tasks. This could result in a high impact on confidentiality and integrity of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP BusinessObjects Business Intelligence Platform	affected 430

CWE

CWE-426

References

https://me.sap.com/notes/3425287
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.