CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Improper Access Control
Summary: the data provisioning agent (aka dp agent) in sap hana does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka sap security note 2262742.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2016-04-14
Last Modified Date: 2018-12-10