CVE-2010-3983

Description

CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involving the Program Job Server and the Program Login property.

Affected products

• SAP / businessobjects3.2 – 3.2

References

• MISChttp://osvdb.org/68682
• MISChttp://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf