Vulnerabilities > CVE-2018-2497 - Unspecified vulnerability in SAP Hana 1.0/2.0

047910
CVSS 2.7 - LOW
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
sap

Summary

The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax CREATE TABLE <table_name> AS SELECT.

Vulnerable Configurations

Part Description Count
Application
Sap
2