CVE-2014-3130

https://notcve.org/view.php?id=CVE-2014-3130

The ABAP Help documentation and translation tools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages. Las herramientas de documentación y traducción ABAP Help (BC-DOC-HLP) en Basis en SAP Netweaver ABAP Application Server no restringe debidamente acceso, lo que permite a usuarios locales ganar privilegios y ejecutar instrucciones ABAP a través de mensajes de ayuda manipulados. • http://scn.sap.com/docs/DOC-8218 http://seclists.org/fulldisclosure/2014/Apr/302 http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-009 http://www.securityfocus.com/bid/67108 https://service.sap.com/sap/support/notes/1910914 • CWE-264: Permissions, Privileges, and Access Controls •