PT-2020-1566

CVE-2020-6307

·

تاريخ النشر

2020-01-14

·

تاريخ التحديث

2021-07-21

الوصف من

CVSS 3.1
4.3
متوسطة
المقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions SAP Basis versions 7.0 through 7.54
Description The issue is related to the Automated Note Search Tool component of the SAP Basis platform, which lacks protection for internal data. This can allow a remote attacker to gain unauthorized access to protected information. The problem arises because the Automated Note Search Tool does not perform sufficient authorization checks, leading to the potential reading of sensitive information.
Recommendations For SAP Basis versions 7.0 through 7.54, update to a version that includes the provided update for the Automated Note Search Tool to ensure sufficient authorization checks are in place.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾