CVE-2016-7402: SQL Injection
SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system administrator) via dbcc importsproc SQL injection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7402?
CVE-2016-7402 is considered a critical vulnerability as it allows unauthorized privilege escalation to the system administrator level.
How do I fix CVE-2016-7402?
To mitigate CVE-2016-7402, upgrade SAP Adaptive Server Enterprise to version 16.0 SP02 PL04 or later.
What types of databases are affected by CVE-2016-7402?
CVE-2016-7402 affects both SourceDB and TargetDB databases within SAP Adaptive Server Enterprise.
Can CVE-2016-7402 be exploited remotely?
CVE-2016-7402 requires the attacker to have access to the affected databases, so remote exploitation is not possible without internal access.
What are the potential consequences of CVE-2016-7402?
Exploitation of CVE-2016-7402 can lead to unauthorized changes within the database, potentially compromising sensitive data and system integrity.