CVE-2026-24318

Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session tokens and reuse them to gain unauthorized access to a victim�s session. If the application continues to accept previously issued tokens after authentication, the attacker could assume the victim�s authenticated context. This could allow the attacker to access or modify information within the victim�s session scope, impacting confidentiality and integrity, while availability remains unaffected.

CVSS v3 4.2 MEDIUM

4.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://me.sap.com/notes/3702191
https://url.sap/sapsecuritypatchday

Configurations

No configuration.

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Debido a una vulnerabilidad de gestión de sesión insegura en SAP Business Objects Business Intelligence Platform, un atacante no autenticado podría obtener tokens de sesión válidos y reutilizarlos para obtener acceso no autorizado a la sesión de una víctima. Si la aplicación continúa aceptando tokens emitidos previamente después de la autenticación, el atacante podría asumir el contexto autenticado de la víctima. Esto podría permitir al atacante acceder o modificar información dentro del alcance de la sesión de la víctima, afectando la confidencialidad y la integridad, mientras que la disponibilidad permanece inafectada.

Information

Published : 2026-04-14 00:16

Updated : 2026-10-26 21:10

NVD link : CVE-2026-24318

Mitre link : CVE-2026-24318

CVE.ORG link : CVE-2026-24318

JSON object : View

Products Affected

No product.

CWE

CWE-539

Use of Persistent Cookies Containing Sensitive Information

{"id": "CVE-2026-24318", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24318", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-14T12:56:56.790972Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.2, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 1.6}]}, "affected": [{"source": "cna@sap.com", "affectedData": [{"vendor": "SAP_SE", "product": "SAP BusinessObjects Business Intelligence Platform", "versions": [{"status": "affected", "version": "ENTERPRISE 430"}, {"status": "affected", "version": "2025"}, {"status": "affected", "version": "2027"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-14T00:16:04.913", "references": [{"url": "https://me.sap.com/notes/3702191", "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "source": "cna@sap.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-539"}]}], "descriptions": [{"lang": "en", "value": "Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session tokens and reuse them to gain unauthorized access to a victim\ufffds session. If the application continues to accept previously issued tokens after authentication, the attacker could assume the victim\ufffds authenticated context. This could allow the attacker to access or modify information within the victim\ufffds session scope, impacting confidentiality and integrity, while availability remains unaffected."}, {"lang": "es", "value": "Debido a una vulnerabilidad de gesti\u00f3n de sesi\u00f3n insegura en SAP Business Objects Business Intelligence Platform, un atacante no autenticado podr\u00eda obtener tokens de sesi\u00f3n v\u00e1lidos y reutilizarlos para obtener acceso no autorizado a la sesi\u00f3n de una v\u00edctima. Si la aplicaci\u00f3n contin\u00faa aceptando tokens emitidos previamente despu\u00e9s de la autenticaci\u00f3n, el atacante podr\u00eda asumir el contexto autenticado de la v\u00edctima. Esto podr\u00eda permitir al atacante acceder o modificar informaci\u00f3n dentro del alcance de la sesi\u00f3n de la v\u00edctima, afectando la confidencialidad y la integridad, mientras que la disponibilidad permanece inafectada."}], "lastModified": "2026-10-26T21:10:00.170", "sourceIdentifier": "cna@sap.com"}