SAP ASE file creation vulnerability (CVE-2016-6196)

Posted on by

Recently SAP released a patch for an Adaptive Server Enterprise vulnerability that allows legitimate database users to create files on disk where the server process can write to. This is useful when doing a chained database attack – first create…