PT-2016-6768
CVE-2016-6142
·
Published
2016-09-26
·
Updated
2016-09-28
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
SAP HANA DB version 1.00.73.00.389160
Description
The issue allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol.
Recommendations
For SAP HANA DB version 1.00.73.00.389160, update to a version that addresses this issue, as specified in SAP Security Note 2197459.
Found an issue in the description? Have something to add? Feel free to write us 👾