Описание
LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind.
Ссылки
- Permissions RequiredVendor Advisory
- Vendor Advisory
- Permissions RequiredVendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:sap:hana:2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 45%
0.00222
Низкий
7.7 High
CVSS3
9.8 Critical
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-863
Связанные уязвимости
github
больше 3 лет назад
LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind.
EPSS
Процентиль: 45%
0.00222
Низкий
7.7 High
CVSS3
9.8 Critical
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-863