CVE-2016-6149

SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Note 2252941.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2016-08-05

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Hana Sps09 (Sap)

References

• http://packetstormsecurity.com/files/138456/SAP-HANA-SPS09-1.00.091.00.1418659308-EXPORT-Information-Disclosure.html
• http://seclists.org/fulldisclosure/2016/Aug/108
• http://seclists.org/fulldisclosure/2016/Aug/97
• http://www.securityfocus.com/bid/92061
• https://www.onapsis.com/blog/analyzing-sap-security-notes-january-2016
• https://www.onapsis.com/research/security-advisories/sap-hana-information-disclosure-export