CVE-2023-40623 Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)

What is CVE-2023-40623?

CVE-2023-40623 is a medium-severity path traversal vulnerability in SAP_SE SAP BusinessObjects Suite (Installer), published on 12 Sep 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system.

Weakness: CWE-1386

Which versions are affected by CVE-2023-40623?

It affects 1 product.

Products include Sap Businessobjects.

How do I fix CVE-2023-40623?

No fix has been published for CVE-2023-40623 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2023-40623 being exploited?

There is no known exploitation of CVE-2023-40623 in the wild and no public exploit code.

Other vulnerabilities in SAP_SE SAP BusinessObjects Suite (Installer)

• CVE-2015-7730 Denial of service in n/a Critical 10.0
• CVE-2014-9387 Auth bypass in n/a Critical 10.0
• CVE-2019-0259 File upload in SAP BusinessObjects Business Intelligence Platform Servers (Enterprise) Critical 9.8
• CVE-2010-3983 Privilege escalation in n/a Critical 9.0
• CVE-2022-28214 Information disclosure in SAP BusinessObjects Enterprise (Central Management Server) High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hgv7-wrhw-7w24.