CVE-2017-16684 SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentication checks for functionalities that require user identity.
CriticalCVSS 9.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentication checks for functionalities that require user identity.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap business intelligence promotion management application | = 4.10 | No fix listed |
| sap business intelligence promotion management application | = 4.20 | No fix listed |
| sap business intelligence promotion management application | = 4.30 | No fix listed |
| SAP Business Intelligence Promotion Management Application. | = Enterprise 4.10, 4.20, 4.30 | No fix listed |
References
- 102147 third-party-advisory vdb-entry
- blogs.sap.com vendor-advisory
- launchpad.support.sap.com permissions-required