CVE-2019-0266

Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform users to a trace file of the SAP HANA system. Even though this trace file is protected from unauthorized access, the risk of leaking information is increased.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
sapCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
VendorProductVersion
saphana_extended_application_services
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/106988
https://launchpad.support.sap.com/#/notes/2724713
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
http://www.securityfocus.com/bid/106988
https://launchpad.support.sap.com/#/notes/2724713
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943