Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP HANA
(SAP HANA)
Описание
The SQL trace level is currently set to 'ALL_WITH_RESULTS'. This setting will force the trace to write all result
sets from SQL statements in the trace file. Persons who are not authorized to see this information may still be able
to read these trace files.
Recommendation: Use SQL trace with results in exceptional cases only. Change the trace level to ALL or
a lower trace level.
Even if the SQL trace is switched off (trace=off), the trace level should not be set to ALL_WITH_RESULTS
because someone could activate this critical trace level unintentionally by switching on the SQL trace.
sets from SQL statements in the trace file. Persons who are not authorized to see this information may still be able
to read these trace files.
Recommendation: Use SQL trace with results in exceptional cases only. Change the trace level to ALL or
a lower trace level.
Even if the SQL trace is switched off (trace=off), the trace level should not be set to ALL_WITH_RESULTS
because someone could activate this critical trace level unintentionally by switching on the SQL trace.
Как исправить
Ссылки
