First published: Thu Jul 31 2014(Updated: )
SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SAP HANA Extended Application Services, Advanced Model | ||
SAP HANA Extended Application Services |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-5173 is classified as a medium severity vulnerability.
To fix CVE-2014-5173, ensure that the affected applications are not publicly accessible and apply the latest patches from SAP.
CVE-2014-5173 affects both SAP HANA Extend Application Services and SAP HANA Extended Application Services.
Yes, CVE-2014-5173 allows remote attackers to bypass access restrictions, potentially leading to unauthorized access.
CVE-2014-5173 was reported in 2014.