PT-2018-15502

CVE-2018-2369

·

Published

2018-02-14

·

Updated

2020-08-24

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions SAP HANA versions 1.00 through 2.00
Description The issue allows an unauthenticated attacker to access restricted information under certain conditions. It is related to the authentication function of the SAP HANA server on its SQL interface, which can disclose 8 bytes of the server process memory. However, the attacker cannot influence or predict the location of the leaked memory.
Recommendations For SAP HANA versions 1.00 through 2.00, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾