PT-2018-15502
CVE-2018-2369
·
تاريخ النشر
2018-02-14
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SAP HANA versions 1.00 through 2.00
Description
The issue allows an unauthenticated attacker to access restricted information under certain conditions. It is related to the authentication function of the SAP HANA server on its SQL interface, which can disclose 8 bytes of the server process memory. However, the attacker cannot influence or predict the location of the leaked memory.
Recommendations
For SAP HANA versions 1.00 through 2.00, at the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾