CVE-2020-26834

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-12-09 · updated 2026-06-17
Weakness: CWE-287

Description

SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manipulate a valid existing SAML bearer token to authenticate as a user whose name is identical to the truncated username for whom the SAML bearer token was issued.

Affected products

SAP SE SAP HANA Database: 2.00

References

https://launchpad.support.sap.com/#/notes/2978768
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079
https://launchpad.support.sap.com/#/notes/2978768
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079

Get alerted when CVE-2020-26834 or the next vulnerability affects your stack