CVE-2023-40623 — Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)
SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with ope…
Published: 2023-09-12 · CVSS: 6.2 · CVSS 3.1
SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7