Description
Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote authenticated users to gain privileges and execute arbitrary programs via a crafted (1) RFC or (2) SOAP-RFC request.
References
- 71055 vdb-entry
- 20141112 [ESNC-2039348] Multiple Critical Security Vulnerabilities in SAP Governance, Risk and Compliance (SAP GRC) mailing-list
- https://service.sap.com/sap/support/notes/2039348
- http://packetstormsecurity.com/files/129083/SAP-GRC-Bypass-Privilege-Escalation-Program-Execution.html
- sapgrc-cve20133678-priv-esc(98637) vdb-entry
- http://www.esnc.de/security-advisories/security-vulnerability-in-sap-grc-access-control
- 20141112 [ESNC-2039348] Multiple Critical Security Vulnerabilities in SAP Governance, Risk and Compliance (SAP GRC) mailing-list