CVE-2017-8914

High

Published: 23/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Sinopia, used in SAP HANA XS versions 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy.

Risk Assessment

Attackers can exploit this vulnerability for malicious actions, potentially leading to data integrity loss and system security breaches.

Recommendation

It is recommended to upgrade to the latest version of SAP HANA and implement secure user creation policies to minimize risk.

Other vulnerabilities in SAP HANA XS

CVE-2017-8915High
Sinopia, used in SAP HANA XS versions 1.00 and 2.00, allows remote attackers to cause a denial of service by pushing a package with a filename containing a $ (dollar sign) or % (percent) character.

Original NVD description (English source)

sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS