Lumension® Endpoint Intelligence Center

Intelligence Center » News Archive » Login vulnerability exposes SAP ASE databases

Login vulnerability exposes SAP ASE databases

2015/04/24

Securityweek - (International) The German business software company SAP patched a login vulnerability in its SAP Adaptive Server Enterprise (ASE) in which attackers could use a flawed "probe" two-phase commit login to gain unauthorized access and potentially exploit a privilege escalation flaw to take complete control of the affected server.

Source: http://www.securityweek.com/login-vulnerability-exposes-sap-ase-databases

Note: This news synopsis is taken from the DHS Daily Open Source Infrastructure Report, a daily [Monday through Friday, except US Federal holidays] summary of open-source published information concerning significant critical infrastructure issues; a 10-day archive of the DOSIR can be found at: http://www.dhs.gov/dhs-daily-open-source-infrastructure-report.


Last Updated: 27 May 2016 10:24:11