lolcreds

Public credential defaults and exposure patterns for authorized security testing.

SAP BusinessObjects Business Intelligence Platform

SAPenterprise app4 credentials

Credentials4 documented
01

CMS Administrator Password

sap-businessobjects / administrator-password

SAP BusinessObjects BI Platform uses Central Management Server accounts such as Administrator for CMC, BI Launch Pad, SDK, and REST access. The Administrator password is set during installation or deployment.

generated on installuser definedsecretusername/password

Location

public interface
Central Management Console, BI Launch Pad, RESTful web services, and SDK logon
database

CMS repository/security database storing users, groups, tokens, and encrypted credential data

config file

response.ini, deployment scripts, SIA/CMS configuration, and web application properties

secret store

password managers and deployment vaults

logs

CMS, Adaptive Processing Server, webapp, and installer logs

02

Enterprise/LDAP/AD User Credential

sap-businessobjects / enterprise-alias-and-service-account

BusinessObjects can authenticate Enterprise users and external LDAP/AD users, and often stores service account credentials for schedules, publications, data sources, and external identity integration.

user definedsecretusername/password

Location

public interface
CMC, BI Launch Pad, SDK, REST, and scheduling workflows
database

CMS repository records for users, aliases, schedules, and connection objects

config file

LDAP/AD plugin configuration, service account scripts, and BI deployment files

secret store

enterprise password vaults and server credential stores

logs

authentication plugin logs and schedule execution logs

03

Trusted Authentication Shared Secret

sap-businessobjects / trusted-auth-shared-secret

BusinessObjects trusted authentication uses shared secrets/tokens between trusted web applications and the BI platform to assert users.

user definedgenerated on installsecretsecret value

Location

config file

trusted authentication configuration files, web.xml/properties, and custom application settings

secret store

application vaults and deployment secrets

source code

custom SSO/trusted-auth applications and samples

logs

SSO and authentication debug traces

04

Universe / Data Connection Credential

sap-businessobjects / database-connection-secret

BI content stores database connection credentials for universes, reports, publications, and data federation.

user definedsecretsecret value

Location

database

CMS repository connection objects and encrypted credential storage

config file

universe exports, LCMBIAR/BIAR packages, and connection server configuration

artifact

BIAR/LCMBIAR promotion packages, report exports, and backups

logs

report refresh and connection server traces

Scope

Authorized use

LOLCreds helps map the credential surface of real products: known defaults, generated values, credential locations, and exposure patterns.