[ESNC-2039348] Multiple Critical Security Vulnerabilities in SAP Governance, Risk and Compliance (SAP GRC)

ESNC-2039348 Multiple Critical Security Vulnerabilities in SAP Governance, Risk and Compliance SAP GRC Please refer to http://www.esnc.de for the original security advisory, updates and additional information. ------------------------------------------------------------------------ 1. Business...

CVE-2013-3678

CVE-2013-3678 affects SAP Governance, Risk, and Compliance (SAP GRC) – Access Control . The vulnerability class includes SoD bypass, privilege escalation, and remote arbitrary program execution . The exposed function referenced in public material is /GRCPI/GRIA_USR_GET_AUTH , with exploitation po...