PT-2022-18562
CVE-2022-27670
·
تاريخ النشر
2022-04-12
·
تاريخ التحديث
2022-04-20
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
SAP SQL Anywhere version 17.0
Description
The issue allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers.
Recommendations
For SAP SQL Anywhere version 17.0, consider restricting access to queries that use indirect identifiers until a patch is available. As a temporary workaround, monitor server activity closely to quickly respond to potential crashes caused by malicious queries.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾