Description
SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://packetstormsecurity.com/files/129613/SAP-Business-Objects-Search-Token-Privilege-Escalation.html ↗
- https://www.onapsis.com/research/security-advisories/sap-business-objects-search-token-privilege-escalation-via-corba ↗
- https://www.securityfocus.com/archive/1/archive/1/534249/100/0/threaded ↗
- http://seclists.org/fulldisclosure/2014/Dec/60 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99607 ↗