PT-2014-2697 · Sap · Sap Governance

Ertunga Arsal + 1 · Publicado 2014-11-17 · Atualizado 2018-10-09 · CVE-2013-3678

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SAP Governance, Risk, and Compliance (GRC) (affected versions not specified)

Description The issue allows remote authenticated users to gain privileges and execute arbitrary programs. This can be achieved by sending a crafted request, either via RFC or SOAP-RFC.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2013-3678

Produtos afetados

Sap Governance

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2013-3678 · Nota de Segurança
• http://packetstormsecurity.com/files/129083/SAP-GRC-Bypass-Privilege-Escalation-Program-Execution.html · Nota
• http://securityfocus.com/bid/71055 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98637 · Nota
• http://seclists.org/fulldisclosure/2014/Nov/25 · Nota
• https://service.sap.com/sap/support/notes/2039348 · Nota
• http://esnc.de/security-advisories/security-vulnerability-in-sap-grc-access-control · Nota
• http://securityfocus.com/archive/1/533965/100/0/threaded · Nota