HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges.
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Link | Tags |
---|---|
http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04588084 | vendor advisory |
http://www.securitytracker.com/id/1031870 | vdb entry |