LDAP Authentication Bypass in SAP HANA Database
CVE-2021-21484
7.7HIGH
Summary
A security vulnerability exists in SAP HANA Database version 2.0 that allows LDAP authentication to be bypassed. This issue arises when an attached LDAP directory server is configured to permit unauthenticated binds, which could allow unauthorized users to access sensitive resources. This misconfiguration can lead to exposed data and potential exploitation by malicious actors. Proper configuration of LDAP settings is essential to guard against these types of vulnerabilities and to ensure the integrity of user authentication.
Affected Version(s)
SAP HANA < 2.0
References
CVSS V3.1
Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved