Description
SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system administrator) via dbcc import_sproc SQL injection.
Unscored
CVE-2016-7402
EUVD-2016-8257GHSA-7w47-ph55-4fr4
SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system admin…
Published Nov 3, 2016 · Updated Aug 6, 2024 · Assigned by mitre