Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP HANA
(SAP HANA)
Описание
The role CONTENT_ADMIN contains all privileges required for working with information models in the repository of the SAP HANA database.
The user SYSTEM has the role CONTENT_ADMIN by default.
Only the database user used to perform system updates should have the role
CONTENT_ADMIN. Otherwise do not grant this role to users, particularly in production systems. It should be used as a role template only.
ou can verify whether a user or role has the CONTENT_ADMIN role by executing the statement:
SELECT * FROM GRANTED_ROLES WHERE ROLE_NAME = 'CONTENT_ADMIN'
AND GRANTEE NOT IN ('SYSTEM');
The user SYSTEM has the role CONTENT_ADMIN by default.
Only the database user used to perform system updates should have the role
CONTENT_ADMIN. Otherwise do not grant this role to users, particularly in production systems. It should be used as a role template only.
ou can verify whether a user or role has the CONTENT_ADMIN role by executing the statement:
SELECT * FROM GRANTED_ROLES WHERE ROLE_NAME = 'CONTENT_ADMIN'
AND GRANTEE NOT IN ('SYSTEM');
Как исправить
Ссылки
SAP HANA Security
Guide
Guide
