CVE-2022-39013: 
SAP BusinessObjects Business Intelligence Platform vulnerability analysis and mitigation

CVE-2022-39013 is a security vulnerability affecting SAP systems that was discovered and disclosed in August 2022. Under certain conditions, an authenticated attacker can gain access to OS credentials, which could lead to system compromise (CVE Details). The vulnerability affects multiple SAP products including SAP Business Planning and Consolidation, SAP NetWeaver ABAP Server, and SAPUI5 versions (CERT-FR).

The vulnerability allows authenticated attackers to access operating system credentials through specific attack vectors. This access to OS credentials enables attackers to modify system data. The vulnerability has been assigned to SAP SE and was officially recorded in the CVE database on August 29, 2022 (CVE Details).

The exploitation of this vulnerability results in a high impact on confidentiality and low impact on integrity and availability of the application. The successful exploitation allows attackers to access OS credentials, modify system data, and potentially make the system unavailable (CVE Details).

SAP has released security patches to address this vulnerability. Users are advised to apply the security updates as detailed in SAP Security Note 3229132 (SAP Note).