CVE-2020-26834
SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manipulate a valid exis…
Published: 2020-12-09 · CVSS: 4.2 · CVSS 3.0
SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manipulate a valid existing SAML bearer token to authenticate as a user whose name is identical to the truncated username for whom the SAML bearer token was issued.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7