critical9.8
CVE-2016-6143
SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806.
Impact
SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Hana | Version 1.00.73.00.389160 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/92062
- https://layersevensecurity.com/wp-content/uploads/2015/11/Layer-Seven-Security_SAP-Security-Notes_October-2015.pdf
- https://www.onapsis.com/blog/analyzing-sap-security-notes-october-2015
- http://www.securityfocus.com/bid/92062
- https://layersevensecurity.com/wp-content/uploads/2015/11/Layer-Seven-Security_SAP-Security-Notes_October-2015.pdf
- https://www.onapsis.com/blog/analyzing-sap-security-notes-october-2015