CVE-2014-9320

SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SIPLATFORMSEARCHSERVERLOGONTOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905...

CVE-2014-9320

CVE-2014-9320 affects SAP BusinessObjects Edge 4.1. An attacker can obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN via CORBA, enabling privilege escalation to SYSTEM. The issue originates from improper access control in CORBA calls, potentially exploitable by remote users (possibly without auth...