Authentication Bypass in SAP HANA XS Application Services
CVE-2014-5173

Currently unrated

Key Information:

Vendor
SAP
Status
Hana Extend Application Services
Vendor
CVE Published:
31 July 2014

Summary

SAP HANA Extend Application Services (XS) is susceptible to a vulnerability that enables remote attackers to bypass access restrictions. This flaw occurs when an attacker sends a crafted request to a private IU5 SDK application that has previously been available to the public, allowing unauthorized access to sensitive resources. Proper authentication protocols are essential to mitigate the risk associated with this vulnerability and protect the integrity of application data.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/94931
vdb-entryx_refsource_XF
http://packetstormsecurity.com/files/127667/SAP-HANA-IU5-...
x_refsource_MISC
http://seclists.org/fulldisclosure/2014/Jul/150
mailing-listx_refsource_FULLDISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.