PT-2018-15502
CVE-2018-2369
·
Publicado
2018-02-14
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
5.3
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SAP HANA versions 1.00 through 2.00
Description
The issue allows an unauthenticated attacker to access restricted information under certain conditions. It is related to the authentication function of the SAP HANA server on its SQL interface, which can disclose 8 bytes of the server process memory. However, the attacker cannot influence or predict the location of the leaked memory.
Recommendations
For SAP HANA versions 1.00 through 2.00, at the moment, there is no information about a newer version that contains a fix for this issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾