CVE-2016-6148

Name of the Vulnerable Software and Affected Versions SAP HANA DB version 1.00.73.00.389160

Description The issue is related to insufficient input validation, allowing a remote attacker to cause a denial of service or execute arbitrary code via vectors related to an IMPORT statement. This can be exploited by a remote attacker to impact the system.

Recommendations For SAP HANA DB version 1.00.73.00.389160, consider restricting access to the IMPORT statement until a patch is available. As a temporary workaround, limit the ability to execute arbitrary code by restricting user privileges on the database. At the moment, there is no information about a newer version that contains a fix for this vulnerability.