CVE-2019-0261
Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks properly for XS advanced platform and business users. Fixed in 1.0.97 to 1.0.99 (running on SAP HANA 1 or SAP HANA 2 SPS0 (second S stands for stack)).
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cna@sap.com
- Published
- 2019-02-15
- Last modified
- 2024-08-04
- Weaknesses
- CWE-306
Affected products
References
- http://www.securityfocus.com/bid/106986
- https://launchpad.support.sap.com/#/notes/2742027
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
