CVE-2017-16687

概要

参考情報

• securityfocus.com/bid/102152 · Third Party Advisory
• blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017 · Vendor Advisory
• launchpad.support.sap.com · Permissions Required

hana database のその他の脆弱性

• CVE-2026-0492高 8.8SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user po…
• CVE-2023-40309緊急 9.8SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authe…
• CVE-2023-40308高 7.5SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption e…
• CVE-2021-21474中 6.5SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Ass…
• CVE-2020-26834中 5.4SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It i…