CVE-2017-16684

Critical

Published: 12/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The SAP Business Intelligence Promotion Management Application in versions 4.10, 4.20, and 4.30 does not perform authentication checks for functionalities that require user identity.

Risk Assessment

The lack of proper authentication checks may lead to unauthorized access to application functionalities, posing a risk of data leakage or unauthorized actions.

Recommendation

It is recommended to implement appropriate authentication mechanisms for all functionalities requiring user identity.

Original NVD description (English source)

SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentication checks for functionalities that require user identity.