description: SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.
problem types: CWE-352
affected:
{
product: SAP BusinessObjects Business Intelligence Platform (Central management Console)
vendor: SAP SE
versions:
status: affected, version: 420
status: affected, version: 430
}