CVE-2019-0306

SAP HANA Extended Application Services advanced model, version 1, allows authenticated low privileged XS Advanced Platform users such as SpaceAuditors to execute requests to obtain a complete list of SAP HANA user IDs and names...

CVE-2019-0306

SAP HANA Extended Application Services (advanced model) v1 has an information disclosure flaw: authenticated low-privilege XS Advanced users (e.g., SpaceAuditors) can enumerate SAP HANA user IDs and names. Attack vector is network-based with low complexity; confidentiality impact is partial. No e...