Description
The security audit log of SAP HANA does not log SELECT events if these events are part of a statement with the syntax CREATE TABLE <table_name> AS SELECT.
Available fix and Supported packages
- HDB | 1.00 | 1.00
- HDB | 2.00 | 2.00
- SAP HANA DATABASE 1.00 | SP122 | 000017
- SAP HANA DATABASE 2.0 | SP024 | 000001
- SAP HANA DATABASE 2.0 | SP030 | 000000
Affected component
- HAN-DB-SEC
SAP HANA Security & User Management
CVSS
Score: 2.7
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/2704878
