CVE-2019-0266: High severity sap hana extended application services, advanced model vulnerability
Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform users to a trace file of the SAP HANA system. Even though this trace file is protected from unauthorized access, the risk of leaking information is increased.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0266?
CVE-2019-0266 is considered a medium severity vulnerability due to the potential exposure of sensitive user credentials.
How do I fix CVE-2019-0266?
To mitigate CVE-2019-0266, it is recommended to update SAP HANA Extended Application Services to a version that addresses this vulnerability.
What impact does CVE-2019-0266 have on SAP HANA systems?
CVE-2019-0266 can lead to credential leakage, increasing the risk of unauthorized access to SAP HANA systems.
What are the conditions that lead to CVE-2019-0266?
CVE-2019-0266 occurs when platform user credentials are written to a trace file under certain configurations within SAP HANA Extended Application Services.
Is there any immediate action required for CVE-2019-0266?
Yes, affected organizations should assess their systems and apply necessary updates or configurations to prevent potential credential leakage from CVE-2019-0266.