Sap Hana

LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind.

Published: 2021-03-09T14:11:24.000Z
Updated: 2024-08-03T18:16:22.549Z

The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges.

Published: 2019-09-10T16:48:14.000Z
Updated: 2024-08-04T17:44:16.461Z

SLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML document accepted from an untrusted source. The attacker can call SLDREG with an XML file containing a reference to an XML External Entity (XXE). This can cause SLDREG to, for example, continuously loop, read arbitrary files and even send local files.

Published: 2019-04-10T20:25:40.000Z
Updated: 2024-08-04T17:44:16.347Z

In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more information about capture & replay), user credentials may be stored in clear text in the indexserver trace files of the control system. An attacker with the required authorizations on the control system may be able to access the user credentials and gain unauthorized access to data in the captured or target system.

Published: 2018-03-14T19:00:00.000Z
Updated: 2024-08-05T04:21:33.207Z

Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would otherwise be restricted. An attacker can misuse the authentication function of the SAP HANA server on its SQL interface and disclose 8 bytes of the server process memory. The attacker cannot influence or predict the location of the leaked memory.

Published: 2018-02-14T12:00:00.000Z
Updated: 2024-08-05T04:14:39.744Z