CVE-2020-6263

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS Java versions 7.00 through 7.50

Description The issue affects standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol. These clients do not perform authentication checks for operations that require user identity, leading to an authentication bypass.

Recommendations For SAP NetWeaver AS Java versions 7.00 through 7.50, consider implementing additional authentication checks for operations that require user identity to prevent unauthorized access. As a temporary workaround, restrict access to sensitive operations until a proper fix is applied.