PT-2020-16517 · Sap · Sap Hana Database

Published 2020-12-09 · Updated 2020-12-11 · CVE-2020-26834

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP HANA Database version 2.0

Description The issue arises from incorrect validation of the username during SAML bearer token-based user authentication. It allows manipulation of a valid existing SAML bearer token to authenticate as a user with a name identical to the truncated username for whom the token was issued.

Recommendations For SAP HANA Database version 2.0, as a temporary workaround, consider restricting the use of SAML bearer token-based user authentication until a patch is available. Additionally, ensure that all usernames are unique and cannot be truncated to match another existing user, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-26834

Affected Products

Sap Hana Database

References · 20

• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26834 · Security Note
• https://osv.dev/vulnerability/CVE-2020-26834 · Vendor Advisory
• https://t.me/cibsecurity/18022 · Telegram Post
• https://t.me/cibsecurity/18155 · Telegram Post
• https://t.me/cibsecurity/18175 · Telegram Post
• https://t.me/cvenotify/6990 · Telegram Post
• https://t.me/cibsecurity/18272 · Telegram Post
• https://t.me/cibsecurity/18252 · Telegram Post
• https://t.me/cibsecurity/18233 · Telegram Post
• https://t.me/cibsecurity/18099 · Telegram Post
• https://t.me/cibsecurity/18002 · Telegram Post
• https://t.me/cibsecurity/18060 · Telegram Post
• https://t.me/cibsecurity/18118 · Telegram Post
• https://t.me/cibsecurity/18041 · Telegram Post