Description (CNA)
The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP HANA | affected < 1.0; affected < 2.0 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506
- https://launchpad.support.sap.com/#/notes/2829681
ADP enrichment
No English description supplied.