PT-2015-2653

CVE-2015-7993

Published

2015-11-10

Updated

2015-11-12

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP HANA DB version 1.00.73.00.389160

Description The issue exists due to insufficient input validation in the Extended Application Services component of the SAP HANA database management system. This allows a remote attacker to execute arbitrary code during the HTTP server authentication procedure.

Recommendations For SAP HANA DB version 1.00.73.00.389160, consider applying the fix provided in SAP Security Note 2197397 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Nahuel D. Sánchez

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers

CVE-2015-7993