[Onapsis Security Advisory 2015-020] SAP HANA Trace configuration SQL injection

Posted by Onapsis Research Team on Sep 29

Onapsis Security Advisory 2015-020: SAP HANA Trace configuration SQL
injection

1. Impact on Business
=====================

By exploiting this vulnerability an attacker could change configuration
settings in the HANA system, affecting the integrity of the data stored
and possibly turning the platform unavailable to other users.

Risk Level: Medium

2. Advisory Information
=======================

– Public Release Date: 09/29/2015
– Last Revised:…

Leave a Reply