EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

KB441778: MicroStrategy Installation having a unquoted services


Community Admin

• Strategy


This Knowledge Base article describes which unquoted service path should be quoted to avoid a security threat.

SYMPTOM
After running a Strategy installation the following service with an untrusted path could be found: 
Strategy MongoDB SQL Engine 08.00 64 : E:\Program Files (x86)\Common Files\MicroStrategy\ODBC\mongodbserver.exe 
This path uses an unquoted service path, which contains at least one whitespace which offer exploitable vulnerabilities. 
STEPS TO REPRODUCE
Install 10.3 HF1 on WIndows 2012 R2 Universal
ACTION
This issue has been addressed in 11.0. Upgrade to this version to take advantage of this fix.
WORKAROUND
Change the registry setting for ImagePath and add quotes around the filepath, the registry setting is located at \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Strategy MongoDB SQL Engine 08.00 64 KB441778


Comment

0 comments

Details

Knowledge Article

Published:

September 18, 2018

Last Updated:

December 28, 2018