PT-2020-19058
CVE-2020-6263
·
تاريخ النشر
2020-06-10
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver AS Java versions 7.00 through 7.50
Description
The issue affects standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol. These clients do not perform authentication checks for operations that require user identity, leading to an authentication bypass.
Recommendations
For SAP NetWeaver AS Java versions 7.00 through 7.50, consider implementing additional authentication checks for operations that require user identity to prevent unauthorized access. As a temporary workaround, restrict access to sensitive operations until a proper fix is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾