Описание
Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confidentiality and integrity and high impact on availability of the application.
EPSS
6.9 Medium
CVSS3
Дефекты
Связанные уязвимости
Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confidentiality and integrity and high impact on availability of the application.
Уязвимость клиента для взаимодействия с базой данных SAP HANA через JDBC SAP HANA JDBC Client, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код
EPSS
6.9 Medium
CVSS3