CVE-2016-7402

SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system administrator) via dbcc import_sproc SQL injection.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2016-11-03

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Adaptive Server Enterprise (Sybase)

References

• http://www.securityfocus.com/bid/92950
• https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-017/?fid=8409