Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:L/AC:L/AU:N/C:P/I:N/A:NSAP)
Производитель ПО
Наименование ПО
SAP Notes
(1764298-5)
Описание
Information such as landscape configuration data, user passwords can be discovered using Database Studio. This information may be used by an attacker to further attack MaxDB.
Как исправить
Download MaxDB Database Studio 7.9 from SWDC. To find the download goto https://service.sap.com/swdc -> Search for Software Downloads ->Search Term -> Database Studio 7.9or use the following direct link:https://service.sap.com/~form/handler?_APP=00200682500000001943& _EVENT=DISPHIER& HEADER=Y& FUNCTIONBAR=N&EVENT=TREE&NE=NAVIGATE&ENR=01200314690200012952&V=MAINT&TA=ACTUAL&PAGE=SEARCHSee also note 1097311: SAP MaxDB Database Studio installation.
Ссылки