Read the docs
TI-2021-04572 Aliases CVE-2021-21474GHSA-8xcp-qvv3-hccf

SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker…

Priority LOW 30CWE-326Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-326.

Summary

SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to tamper with it and alter it in a way that the digest continues to be the same and without invalidating the digital signature, this allows them to impersonate as user in HANA database and be able to read the contents in the database.

Why it matters now

EPSS 0.00709 53rd percentileScored 2026-11-07
Fix Fixed SAP HANA Database (SAP SE): 1.0, 2.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SAPSAP HANA Databasebefore 1.0; before 2.01.0, 2.0Patch availableCNA
  • SAP HANA Database VendorSAP Affected before 1.0; before 2.0 Fixed in 1.0, 2.0 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:sap:hana_database:1.00:*:*:*:*:*:*:*1.00VulnerableSAP
cpe:2.3:a:sap:hana_database:2.00:*:*:*:*:*:*:*2.00VulnerableSAP
  • cpe:2.3:a:sap:hana_database:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·SAP
  • cpe:2.3:a:sap:hana_database:2.00:*:*:*:*:*:*:* Versions 2.00 Vulnerable ·SAP

Remediation

  • Fix · CNA SAP HANA Database (SAP SE) Fixed in 1.0, 2.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-21474
  2. 2026-10-03 Alias added: GHSA-8xcp-qvv3-hccf

References

Advisory 1

Other 1

  • TI-2023-21149 Missing Authorization check in SAP CommonCryptoLib CVSS 3.1CRITICAL 9.8
  • TI-2018-01809 Improper input validation in SAP HANA Database CVSS 3.0CRITICAL 9.8
  • TI-2026-00300 Privilege escalation vulnerability in SAP HANA database CVSS 3.1HIGH 8.8
  • TI-2023-21148 Memory Corruption vulnerability in SAP CommonCryptoLib CVSS 3.1HIGH 7.5
  • TI-2019-00289 SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed… CVSS 3.1HIGH 7.5
  • TI-2017-12276 Information disclosure in SAP HANA extended application services CVSS 3.0MEDIUM 5.3
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences