CVE-2019-0348 Weak cryptography in SAP Business Objects Business Intelligence Platform (Web Intelligence)
SAP Business Intelligence Platform allows unencrypted database connections, potentially exposing sensitive data to interception.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-0348?
CVE-2019-0348 is a medium-severity vulnerability in SAP Business Objects Business Intelligence Platform (Web Intelligence), published on 14 Aug 2019. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can access database with unencrypted connection, even if the quality of protection should be encrypted.
Weakness: CWE-319
Which versions are affected by CVE-2019-0348?
It affects 1 product.
Products include Sap Businessobjects Business Intelligence.
How do I fix CVE-2019-0348?
No fix has been published for CVE-2019-0348 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-0348 being exploited?
There is no known exploitation of CVE-2019-0348 in the wild and no public exploit code.
Other vulnerabilities in SAP Business Objects Business Intelligence Platform (Web Intelligence)
- CVE-2023-40622 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management)
- CVE-2022-41203 Deserialization in SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad)
- CVE-2023-28765 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )
- CVE-2018-2445 Server-side request forgery in SAP BusinessObjects Business Intelligence Platform
- CVE-2023-28762 Information Disclosure in SAP BusinessObjects Intelligence Platform
Sources
Also known as GHSA-mxqq-vq68-78hq.