SAP HANA 2.0 Missing Authentication Vulnerability in Remote-Enabled Functions

A vulnerability in SAP HANA 2.0 (hdbrss) allows an unauthenticated attacker to invoke a remote-enabled function, potentially leading to unauthorized information disclosure. This issue arises from a lack of proper authentication, which could be exploited to access sensitive data. While the vulnerability has a low impact on confidentiality, it does not affect the integrity or availability of the system.

Impact

Exploitation of this vulnerability could result in unauthorized access to information, although it does not compromise system integrity or availability.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Patch Day occurs on the second Tuesday of each month, when SAP releases security updates and patches. For more information, visit the SAP Security Patch Day page on SAP for Me.