Description
SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public.
References
- sap-hanaxs-sec-bypass(94931) vdb-entry
- http://packetstormsecurity.com/files/127667/SAP-HANA-IU5-SDK-Authentication-Bypass.html
- 20140729 [Onapsis Security Advisory 2014-022] SAP HANA IU5 SDK Authentication Bypass mailing-list
- http://scn.sap.com/docs/DOC-8218
- 20140729 [Onapsis Security Advisory 2014-022] SAP HANA IU5 SDK Authentication Bypass mailing-list
- 68950 vdb-entry
- https://service.sap.com/sap/support/notes/1964428