Vulnerability Description
SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Note 2252941.
CVSS Score
5.5
MEDIUM
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Hana Sps09 | 1.00.091.00.14186593 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/138456/SAP-HANA-SPS09-1.00.091.00.141865930
- http://seclists.org/fulldisclosure/2016/Aug/108
- http://seclists.org/fulldisclosure/2016/Aug/97
- http://www.securityfocus.com/bid/92061Third Party AdvisoryVDB Entry
- https://www.onapsis.com/blog/analyzing-sap-security-notes-january-2016Third Party Advisory
- https://www.onapsis.com/research/security-advisories/sap-hana-information-discloPermissions RequiredThird Party Advisory
- http://packetstormsecurity.com/files/138456/SAP-HANA-SPS09-1.00.091.00.141865930
- http://seclists.org/fulldisclosure/2016/Aug/108
- http://seclists.org/fulldisclosure/2016/Aug/97
- http://www.securityfocus.com/bid/92061Third Party AdvisoryVDB Entry
- https://www.onapsis.com/blog/analyzing-sap-security-notes-january-2016Third Party Advisory
- https://www.onapsis.com/research/security-advisories/sap-hana-information-discloPermissions RequiredThird Party Advisory
FAQ
What is CVE-2016-6149?
CVE-2016-6149 is a vulnerability with a CVSS score of 5.5 (MEDIUM). SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Note 2252941.
How severe is CVE-2016-6149?
CVE-2016-6149 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-6149?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Hana Sps09.