Description
SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by leveraging the EXPORT statement to export files, aka SAP Security Note 2252941.
References
- 20160822 Onapsis Security Advisory ONAPSIS-2016-038: SAP HANA Information disclosure in EXPORT mailing-list
- http://packetstormsecurity.com/files/138456/SAP-HANA-SPS09-1.00.091.00.1418659308-EXPORT-Information-Disclosure.html
- https://www.onapsis.com/research/security-advisories/sap-hana-information-disclosure-export
- https://www.onapsis.com/blog/analyzing-sap-security-notes-january-2016
- 92061 vdb-entry
- 20160819 Onapsis Security Advisory ONAPSIS-2016-038: SAP HANA Information disclosure in EXPORT mailing-list