CVE-2024-34684

MEDIUM Year: 2024
CVSS v3 Score
6.0
Medium
Weakness Type
CWE-200
View all →

Vulnerability Description

On Unix, SAP BusinessObjects Business Intelligence Platform (Scheduling) allows an authenticated attacker with administrator access on the local server to access the password of a local account. As a result, an attacker can obtain non-administrative user credentials, which will allow them to read or modify the remote server files.

Related Vulnerabilities

CVE-2011-2707

MEDIUM
CVSS:6.0(Medium)

The ptrace_setxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel m...

CWE-2002011

CVE-2016-9103

MEDIUM
CVSS:6.0(Medium)

The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values before wri...

CWE-2002016

CVE-2017-12315

MEDIUM
CVSS:6.0(Medium)

A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restric...

CWE-2002017

CVE-2018-12158

MEDIUM
CVSS:6.0(Medium)

Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information disclosur...

CWE-2002018

CVE-2021-21512

MEDIUM
CVSS:6.0(Medium)

Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulne...

CWE-2002021

CVE-2022-23509

MEDIUM
CVSS:6.0(Medium)

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. GitOps run has a local S3 bucket which it uses for synchron...

CWE-2002022