CVE-2016-6145

概要

参考情報

• packetstormsecurity.com/files/138444/SAP-HANA-DB-1.00.091.00.1418659308-Information-Disclosure.html
• seclists.org/fulldisclosure/2016/Aug/92 · Third Party Advisory
• securityfocus.com/bid/92346
• onapsis.com/blog/onapsis-publishes-15-advisories-sap-hana-and-building-components · Third Party Advisory
• onapsis.com/research/security-advisories/sap-hana-user-information-disclosure · Permissions Required

hana db のその他の脆弱性

• CVE-2016-3639中 4.3SAP HANA DB 1.00.091.00.1418659308 allows remote attackers to obtain sensitive topology information via an unspecified HTTP request, aka SAP…
• CVE-2016-3640中 5.5The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive passwor…