PT-2016-6772 · Sap · Sap Hana

Nahuel Sanchez · Publicado 2016-08-05 · Atualizado 2016-11-28 · CVE-2016-6149

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP HANA version 1.00.091.00.14186593

Description The issue allows local users to obtain sensitive information by leveraging the EXPORT statement to export files.

Recommendations For SAP HANA version 1.00.091.00.14186593, consider restricting access to the EXPORT statement to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-6149

Produtos afetados

Sap Hana

Referências · 8

• https://osv.dev/vulnerability/CVE-2016-6149 · Aviso do Fabricante
• https://onapsis.com/research/security-advisories/sap-hana-information-disclosure-export · Nota
• http://seclists.org/fulldisclosure/2016/Aug/97 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6149 · Nota de Segurança
• https://onapsis.com/blog/analyzing-sap-security-notes-january-2016 · Nota
• http://securityfocus.com/bid/92061 · Nota
• http://packetstormsecurity.com/files/138456/SAP-HANA-SPS09-1.00.091.00.1418659308-EXPORT-Information-Disclosure.html · Nota
• http://seclists.org/fulldisclosure/2016/Aug/108 · Nota