CVE-2015-2074

概要

参考情報

• packetstormsecurity.com/files/130521/SAP-Business-Objects-Unauthorized-File-Repository-Server-Write.html · Third Party Advisory
• seclists.org/fulldisclosure/2015/Feb/93 · Mailing List
• securityfocus.com/archive/1/archive/1/534749/100/0/threaded · Third Party Advisory
• securityfocus.com/bid/72776 · Third Party Advisory

businessobjects edge のその他の脆弱性

• CVE-2015-2073高 7.5The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full …
• CVE-2014-9320緊急 9.8SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM …
• CVE-2015-7730緊急 10.0SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial…
• CVE-2015-2076中 5.0The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka …
• CVE-2015-2075中 5.0SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP …