Vulnetix
Try Vulnetix Request Demo
CVE-2020-26834 PUBLISHED CVSS 4.199999809265137 MEDIUM

SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manipulate a valid existing SAML bearer token to authenticate as a user whose name is identical to the truncated username for whom the SAML bearer token was issued.

EPSS 0.16% · 36.8th percentile

Risk Scores

CVSS v3.0
4.199999809265137
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS Score
0.16%
36.8th percentile

Affected Products

VendorProductVersions
saphana_database2.00
SAP SESAP HANA Database< 2.0

Timeline

References

Open in Interactive Console →