PT-2015-2653
CVE-2015-7993
·
تاريخ النشر
2015-11-10
·
تاريخ التحديث
2015-11-12
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
SAP HANA DB version 1.00.73.00.389160
Description
The issue exists due to insufficient input validation in the Extended Application Services component of the SAP HANA database management system. This allows a remote attacker to execute arbitrary code during the HTTP server authentication procedure.
Recommendations
For SAP HANA DB version 1.00.73.00.389160, consider applying the fix provided in SAP Security Note 2197397 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾