EUVD-2018-14306

Malware in sbrugna...

CVE-2018-2451

The CVE-2018-2451 issue concerns SAP HANA XS v1 (Extended Application Services) where a user’s CLI session may remain valid beyond revoked authorizations, allowing a platform user to access controller resources via an active session and an attacker with a session to misuse the token after closure...

CVE-2018-2451

XS Command-Line Interface CLI user sessions with the SAP HANA Extended Application Services XS, version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding...