Vulnerability in Sap Businessobjects
CVE-2014-9387
SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and gain privileges via a crafted CORBA call, aka SAP Note 2039905.
EPSS: 0.058 (90.7th percentile) — read the EPSS interpretation.
Affected products
- Sap Businessobjects — versions 4.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
- 20141216 [Onapsis Security Advisory 2014-034] SAP Business Objects Search Token Privilege Escalation via CORBA (mailing-list, x_refsource_FULLDISC, Third Party Advisory, VDB Entry)
- 20141216 [Onapsis Security Advisory 2014-034] SAP Business Objects Search Token Privilege Escalation via CORBA (mailing-list, x_refsource_BUGTRAQ)