CVE-2014-9320
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.2%
SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905.
Produtos afetados
n/a · n/aReferências
http://packetstormsecurity.com/files/129613/SAP-Business-Objects-Search-Token-Privilege-Escalation.htmlhttp://seclists.org/fulldisclosure/2014/Dec/60https://exchange.xforce.ibmcloud.com/vulnerabilities/99607https://www.onapsis.com/research/security-advisories/sap-business-objects-search-token-privilege-escalation-via-corbahttps://www.securityfocus.com/archive/1/archive/1/534249/100/0/threaded