Description
During upgrade or installation, SAP Data Intelligence allows an attacker who has access to a specific Kubernetes cluster to read highly sensitive data such as system password. This would allow him to modify or delete data and impact the availability of this specific cluster.
Available fix and Supported packages
- DH_FOUNDATION | 3 | 3
- DATAHUB 3.0 | SP001 | 000000
Affected component
- CA-DI-ONP
SAP DI, on-premise: Please use CA-DI instead
CVSS
Score: 6.3
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/2940823
