SAP security note 2557167, "Potential code injection vulnerability in Crystal Reports Java components", is a note. Below are the symptom and SAP recommended solution.
Description
Symptom
Crystal Reports Java components could allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Solution
This issue is fixed in the patches listed in the "Support Packages & Patches" section below. The "Support Packages & Patches" section will be populated with the relevant patch levels once they are released. For Business Intelligence Platform maintenance schedule and strategy, see Knowledge Base Article 2144559.
Reason and prerequisites
The potential vulnerability would require an attacker to gain access to the file system that hosts an SAP BusinessObjects deployment. From there, the attacker would need to modify Java files and perform actions that cause the modified code to get executed. Doing so effectively requires the attacker to have access to the Java source code.
Full note on SAP: SAP Support Launchpad note 2557167
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
