PT-2020-1566
CVE-2020-6307
·
تاريخ النشر
2020-01-14
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SAP Basis versions 7.0 through 7.54
Description
The issue is related to the Automated Note Search Tool component of the SAP Basis platform, which lacks protection for internal data. This can allow a remote attacker to gain unauthorized access to protected information. The problem arises because the Automated Note Search Tool does not perform sufficient authorization checks, leading to the potential reading of sensitive information.
Recommendations
For SAP Basis versions 7.0 through 7.54, update to a version that includes the provided update for the Automated Note Search Tool to ensure sufficient authorization checks are in place.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾