CVE-2015-3995: Infoleak
Published May 29, 2015
·Updated
SAP HANA DB 1.00.73.00.389160 (NewDB100REL) allows remote authenticated users to read arbitrary files via an IMPORT FROM SQL statement, aka SAP Security Note 2109565.
Affected Software
1 affected component
SAP HANA=1.00.73.00.389160
Event History
May 29, 2015
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3995?
CVE-2015-3995 is considered a high severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2015-3995?
To fix CVE-2015-3995, apply the recommended security patches provided in SAP Security Note 2109565.
3
Who is affected by CVE-2015-3995?
CVE-2015-3995 affects remote authenticated users of SAP HANA database version 1.00.73.00.389160.
4
What is the nature of the vulnerability CVE-2015-3995?
CVE-2015-3995 allows authenticated users to read arbitrary files from the server via an IMPORT FROM SQL statement.
5
Is CVE-2015-3995 being actively exploited?
As of the latest reports, there is no public indication of active exploitation of CVE-2015-3995.