SAP HANA Extended Application Services CVE-2014-5171 Information Disclosure Vulnerability

Bugtraq ID:	68947
Class:	Design Error
CVE:	CVE-2014-5171
Remote:	Yes
Local:	No
Published:	Jul 30 2014 12:00AM
Updated:	Aug 05 2014 03:29AM
Credit:	Sergio Abraham and Manuel Muradas
Vulnerable:
Not Vulnerable:

SAP HANA Extended Application Services CVE-2014-5171 Information Disclosure Vulnerability

SAP HANA Extended Application Services is prone to an information-disclosure vulnerability.

Attackers can exploit this issue through man-in-the-middle attacks to gain access to sensitive information.

SAP HANA Extended Application Services CVE-2014-5171 Information Disclosure Vulnerability

An attacker may use readily available tools to exploit this issue.

SAP HANA Extended Application Services CVE-2014-5171 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SAP HANA Extended Application Services CVE-2014-5171 Information Disclosure Vulnerability

References:

• Vendor Homepage (SAP)