Rewterz Threat Advisory – CVE-2021-21484 – SAP HANA security bypass

Severity

High

Analysis Summary

CVE-2021-21484

SAP HANA could allow a remote attacker to bypass security restrictions, caused by a flaw when the attached LDAP directory server is configured to enable unauthenticated bind. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass LDAP authentication.

Impact

Security bypass

Affected Vendors

SAP

Affected Products

SAP HANA 2.00

Remediation

Refer to SAP note 3017378 for patch information.

SAP Security Patch Day – March 2021