CVE-2019-0357 - The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges

MEDIUM

The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges

Published Sep 10, 2019

6.7

MEDIUM

CVSS 3.1

EPSS 0.39%

The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
< 1.0	affected	-
< 2.0	affected	-

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://launchpad.support.sap.com/#/notes/2829681		x_refsource_MISCPermissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506		x_refsource_CONFIRMVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner sap

Published Sep 10, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a