2180154 - A third party vulnerability scan shows that BusinessObjects services are vulnerable to "Microsoft Windows Unquoted Service Path Enumeration" and this is found to be because service paths are unquoted.

A third party vulnerability scan shows that BusinessObjects services are vulnerable to "Microsoft Windows Unquoted Service Path Enumeration" and this is found to be because of service paths is not quoted.

Unquoted service paths on BusinessObjects server are:

• SVNSubversion
  <INSTALLDIR>\SAP BusinessObjects Enterprise XI 4.0\\subversion\svnserve.exe
  
  
• BOEXI40BWPublisherService
  <INSTALLDIR>\SAP BusinessObjects Enterprise XI 4.0\win32_x86\bwcepubsvc.exe

• SAP BusinessObjects Business Intelligence Platform 4.x (BI 4.2 / 4.3)
• Windows

Microsoft Windows, Unquoted Service Path Enumeration, vulnerability, svnserve.exe, bwcepubsvc.exe , KBA , BI-BIP-SEC , Security Vulnerabilities in SAP BusinessObjects , BI-BIP-INS , Installation, Updates, Upgrade, Patching , Problem