CVE-2015-2076

Description

References

• packetstormsecurity.com/files/130523/SAP-Business-Objects-Unauthorized-Audit-Information-Access.html
• seclists.org/fulldisclosure/2015/Feb/94
• securityfocus.com/archive/1/534750/100/0/threaded
• securityfocus.com/bid/72775

businessobjects edge의 다른 취약점

• CVE-2015-2074높음 7.5The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a f…
• CVE-2015-2073높음 7.5The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full …
• CVE-2014-9320심각 9.8SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM …
• CVE-2015-7730심각 10.0SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial…
• CVE-2015-2075보통 5.0SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP …