[Onapsis Security Advisory 2015-023] SAP HANA Drop Credentials SQL injection

Posted by Onapsis Research Team on Sep 29

Onapsis Security Advisory 2015-023: SAP HANA Drop Credentials SQL
injection

1. Impact on Business
=====================

By exploiting this vulnerability an attacker could modify system
settings and delete credentials which could affect other users in the
HANA system, engaging into a DoS attack.

Risk Level: Medium

2. Advisory Information
=======================

– Public Release Date: 09/29/2015
– Last Revised: 09/29/2015
– Security Advisory…

Leave a Reply