CVE-2014-9320

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Edge version 4.1

Description The issue allows remote attackers to obtain the SI PLATFORM SEARCH SERVER LOGON TOKEN token, which can lead to gaining SYSTEM privileges. This is achieved through vectors involving CORBA calls.

Recommendations For SAP BusinessObjects Edge version 4.1, apply the fix as described in SAP Note 2039905 to resolve the issue. As a temporary workaround, consider restricting access to CORBA calls to minimize the risk of exploitation.