CVE-2023-40623
Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system.
SAP BusinessObjects Suite Installer - versión 420, 430, permite a un atacante dentro de la red crear un directorio en un directorio temporal y vincularlo a un directorio con archivos del sistema operativo. En la explotación exitosa, el atacante puede eliminar todos los archivos del sistema operativo causando un impacto limitado en la integridad y comprometiendo completamente la disponibilidad del sistema.
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2023-08-17 CVE Reserved
- 2023-09-12 CVE Published
- 2024-09-18 EPSS Updated
- 2024-09-25 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-1386: Insecure Operation on Windows Junction / Mount Point
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | 2023-09-13 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Sap Search vendor "Sap" | Businessobjects Search vendor "Sap" for product "Businessobjects" | 420 Search vendor "Sap" for product "Businessobjects" and version "420" | - |
Affected
| ||||||
Sap Search vendor "Sap" | Businessobjects Search vendor "Sap" for product "Businessobjects" | 430 Search vendor "Sap" for product "Businessobjects" and version "430" | - |
Affected
|