Описание
The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:sap:hana:1.00.73.00.389160:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.00251
Низкий
4 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
github
больше 3 лет назад
The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818.
EPSS
Процентиль: 48%
0.00251
Низкий
4 Medium
CVSS2
Дефекты
CWE-20