CVE-2020-6317

In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can access sensitive information which appears in the installation log files. This information although sensitive is of limited utility and cannot be used to further access, modify or...

CVE-2020-6317

Technical details are not publicly available in the provided documents. Monitor for updates.

assimp:assimp_fuzzer: Object-size in std::__1::vector<Assimp::ASE::Material, std::__1::allocator<Assimp::ASE::Materia

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5667916049285120 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...

CVE-2020-6295

CVE-2020-6295 affects SAP Adaptive Server Enterprise 16.0. A vulnerability allows an attacker to access encrypted sensitive information through publicly readable installation log files, leading to a compromise of the Cockpit and potential information disclosure (view/modify/unavailable data). The...

Critical SAP ASE Flaws Allow Complete Control of Databases

Researchers are urging users to apply patches for several critical vulnerabilities in SAP’s Adaptive Server Enterprise ASE. If exploited, the most severe flaws could give unprivileged users complete control of databases and – in some cases – even underlying operating systems. ASE previously known...

Newly Patched SAP ASE Flaws Could Let Attackers Hack Database Servers

A new set of critical vulnerabilities uncovered in SAP's Sybase database software can grant unprivileged attackers complete control over a targeted database and even the underlying operating system in certain scenarios. The six flaws, disclosed by cybersecurity firm Trustwave today, reside in...

Newly Patched SAP ASE Flaws Could Let Attackers Hack Database Servers

A new set of critical vulnerabilities uncovered in SAP's Sybase database software can grant unprivileged attackers complete control over a targeted database and even the underlying operating system in certain scenarios. The six flaws, disclosed by cybersecurity firm Trustwave today, reside in...

CVE-2020-6243

Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...

Code injection

Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...

CVE-2020-6250

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop t...

CVE-2020-6243

Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...

CVE-2020-6241

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevate privileges of users in the system, leading to SQL Injection...

CVE-2020-6252

CVE-2020-6252 affects SAP Adaptive Server Enterprise (ASE) Cockpit on Windows installations of ASE 16. The vulnerability arises because the login password for the helper SQL Anywhere database (used by Cockpit) is stored in a configuration file readable by any local Windows user, enabling an attac...

CVE-2020-6250

SAP Adaptive Server Enterprise 16.0 is affected by an information-disclosure vulnerability (CVE-2020-6250) due to misconfigured endpoints exposed on an adjacent network. An authenticated attacker can read system administrator passwords, potentially leading to reading/writing data and even stoppin...

CVE-2020-6250

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop t...

CVE-2020-6248

CVE-2020-6248 affects SAP Adaptive Server Enterprise (Backup Server) 16.0. The issue arises because the server does not perform required validation for an authenticated user during DUMP/LOAD, enabling arbitrary code execution or code injection. Related sources describe potential database takeover...

Sybase ASE Login Possible

Binary data sybaselogin.nbin...

CVE-2018-2468

Under certain conditions the backup server in SAP Adaptive Server Enterprise ASE, versions 15.7 and 16.0, allows an attacker to access information which would otherwise be restricted...

Authentication flaw

Under certain conditions SAP Adaptive Server Enterprise ASE, versions 15.7 and 16.0, allows an attacker to access information which would otherwise be restricted...

Authentication flaw

Under certain conditions the backup server in SAP Adaptive Server Enterprise ASE, versions 15.7 and 16.0, allows an attacker to access information which would otherwise be restricted...