CVE-2019-0266

HIGH

SAP Hana Extended Application Services - Log Information Exposure

Title source: rule
STIX 2.1

Description

Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform users to a trace file of the SAP HANA system. Even though this trace file is protected from unauthorized access, the risk of leaking information is increased.

References (3)

Core 3
Core References
Permissions Required, Vendor Advisory x_refsource_misc
https://launchpad.support.sap.com/#/notes/2724713
Third Party Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106988

Scores

CVSS v3 7.5
EPSS 0.0036
EPSS Percentile 58.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-532
Status published
Products (1)
sap/hana_extended_application_services 1.0
Published Feb 15, 2019
Tracked Since Feb 18, 2026