CVEvulnerability
CVE-2014-5171
2.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-07-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.9 LOW — AV:A/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.
Affected configurations
• sap hana extended application services
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/127666/SAP-HANA-XS-Missing-Encryption.html packetstormsecurity.com
- http://scn.sap.com/docs/DOC-8218 scn.sap.com
- http://seclists.org/fulldisclosure/2014/Jul/149 seclists.org
- http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-021 www.onapsis.com
- http://www.securityfocus.com/archive/1/532940/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/68947 www.securityfocus.com
- https://service.sap.com/sap/support/notes/1963932 service.sap.com
- http://packetstormsecurity.com/files/127666/SAP-HANA-XS-Missing-Encryption.html packetstormsecurity.com
- http://scn.sap.com/docs/DOC-8218 scn.sap.com
- http://seclists.org/fulldisclosure/2014/Jul/149 seclists.org
- http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-021 www.onapsis.com
- http://www.securityfocus.com/archive/1/532940/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/68947 www.securityfocus.com
- https://service.sap.com/sap/support/notes/1963932 service.sap.com