PT-2021-14550
CVE-2021-21484
·
تاريخ النشر
2021-03-09
·
تاريخ التحديث
2021-03-16
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SAP HANA Database version 2.0
Description
The issue allows LDAP authentication in SAP HANA Database to be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind.
Recommendations
For SAP HANA Database version 2.0, ensure the attached LDAP directory server is configured to disable unauthenticated bind to prevent authentication bypass.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾