SAP HANA HTTP Login Remote Code Execution

Discussion in 'News Aggregator' started by Packet Storm, 10 Nov 2015.

  1. Packet Storm

    Packet Storm Guest

    By sending a crafted HTTP packet to the SAP HANA XS Server, a remote unauthenticated attacker could fully compromise the platform executing arbitrary code or performing a denial of service, thus rendering the platform unavailable until the next process restart. SAP HANA DB version 1.00.73.00.389160 is affected.

    Continue reading...
     

Share This Page

Loading...