critical9.0
CVE-2013-3678
Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote authenticated users to gain privileges and execute arbitrary pr…
Impact
Multiple unspecified vulnerabilities in SAP Governance, Risk, and Compliance (GRC) allow remote authenticated users to gain privileges and execute arbitrary programs via a crafted (1) RFC or (2) SOAP-RFC request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Governance Risk And Compliance | All versions |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/129083/SAP-GRC-Bypass-Privilege-Escalation-Program-Execution.html
- http://seclists.org/fulldisclosure/2014/Nov/25
- http://www.esnc.de/security-advisories/security-vulnerability-in-sap-grc-access-control
- http://www.securityfocus.com/archive/1/533965/100/0/threaded
- http://www.securityfocus.com/bid/71055
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98637
- https://service.sap.com/sap/support/notes/2039348
- http://packetstormsecurity.com/files/129083/SAP-GRC-Bypass-Privilege-Escalation-Program-Execution.html
- http://seclists.org/fulldisclosure/2014/Nov/25
- http://www.esnc.de/security-advisories/security-vulnerability-in-sap-grc-access-control
- http://www.securityfocus.com/archive/1/533965/100/0/threaded
- http://www.securityfocus.com/bid/71055
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98637
- https://service.sap.com/sap/support/notes/2039348