Description (CNA)
SAP Adaptive Server Enterprise (Backup Server), version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Adaptive Server Enterprise (Backup Server) | affected < 16.0 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222
- https://launchpad.support.sap.com/#/notes/2917275
ADP enrichment
No English description supplied.