Lucene search

SapCVELIST:CVE-2020-6252

HistoryMay 12, 2020 - 5:55 p.m.

CVE-2020-6252

2020-05-1217:55:34

sap

www.cve.org

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

12.6%

JSON

Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact system availability.

CNA Affected

[
  {
    "product": "SAP Adaptive Server Enterprise (Cockpit)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 16.0"
      }
    ]
  }
]

References

launchpad.support.sap.com/#/notes/2917090

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-6252