CVE-2015-2076

概要

参考情報

• packetstormsecurity.com/files/130523/SAP-Business-Objects-Unauthorized-Audit-Information-Access.html
• seclists.org/fulldisclosure/2015/Feb/94
• securityfocus.com/archive/1/534750/100/0/threaded
• securityfocus.com/bid/72775

businessobjects edge のその他の脆弱性

• CVE-2015-2074高 7.5The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a f…
• CVE-2015-2073高 7.5The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full …
• CVE-2014-9320緊急 9.8SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM …
• CVE-2015-7730緊急 10.0SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial…
• CVE-2015-2075中 5.0SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP …