CVE-2021-21474

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-02-09 · updated 2026-06-17
Weakness: CWE-326

Description

SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to tamper with it and alter it in a way that the digest continues to be the same and without invalidating the digital signature, this allows them to impersonate as user in HANA database and be able to read the contents in the database.

Affected products

SAP SE SAP HANA Database: 1.00, 2.00

References

https://launchpad.support.sap.com/#/notes/2992154
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543
https://launchpad.support.sap.com/#/notes/2992154
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543

Get alerted when CVE-2021-21474 or the next vulnerability affects your stack