SYMPTOM
After running a Strategy installation the following service with an untrusted path could be found:
Strategy MongoDB SQL Engine 08.00 64 : E:\Program Files (x86)\Common Files\MicroStrategy\ODBC\mongodbserver.exe
This path uses an unquoted service path, which contains at least one whitespace which offer exploitable vulnerabilities.
STEPS TO REPRODUCE
Install 10.3 HF1 on WIndows 2012 R2 Universal
ACTION
This issue has been addressed in 11.0. Upgrade to this version to take advantage of this fix.
WORKAROUND
Change the registry setting for ImagePath and add quotes around the filepath, the registry setting is located at \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Strategy MongoDB SQL Engine 08.00 64 KB441778