PT-2021-8379
CVE-2014-9320
·
تاريخ النشر
2021-08-09
·
تاريخ التحديث
2021-08-17
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
SAP BusinessObjects Edge version 4.1
Description
The issue allows remote attackers to obtain the
SI PLATFORM SEARCH SERVER LOGON TOKEN token, which can lead to gaining SYSTEM privileges. This is achieved through vectors involving CORBA calls.Recommendations
For SAP BusinessObjects Edge version 4.1, apply the fix as described in SAP Note 2039905 to resolve the issue. As a temporary workaround, consider restricting access to CORBA calls to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾