CVE-2016-6149

EPSS 0.06%
Veröffentlicht 05.08.2016 14:59:22
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Note 2252941.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

SAP ≫ Hana Sps09 Version1.00.091.00.14186593

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.167

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://www.onapsis.com/blog/analyzing-sap-security-notes-january-2016

Third Party Advisory

http://packetstormsecurity.com/files/138456/SAP-HANA-SPS09-1.00.091.00.1418659308-EXPORT-Information-Disclosure.html

http://seclists.org/fulldisclosure/2016/Aug/108

http://seclists.org/fulldisclosure/2016/Aug/97

http://www.securityfocus.com/bid/92061

Third Party Advisory

VDB Entry

https://www.onapsis.com/research/security-advisories/sap-hana-information-disclosure-export

Third Party Advisory

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2016-6149

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-6149

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-6149

EUVD