Lucene search

K
cvelistSapCVELIST:CVE-2020-6256
HistoryMay 12, 2020 - 5:51 p.m.

CVE-2020-6256

2020-05-1217:51:22
sap
www.cve.org
5

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

22.7%

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check.

CNA Affected

[
  {
    "product": "SAP Master Data Governance",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 748"
      },
      {
        "status": "affected",
        "version": "< 749"
      },
      {
        "status": "affected",
        "version": "< 750"
      },
      {
        "status": "affected",
        "version": "< 751"
      },
      {
        "status": "affected",
        "version": "< 752"
      },
      {
        "status": "affected",
        "version": "< 800"
      },
      {
        "status": "affected",
        "version": "< 801"
      },
      {
        "status": "affected",
        "version": "< 802"
      },
      {
        "status": "affected",
        "version": "< 803"
      },
      {
        "status": "affected",
        "version": "< 804"
      }
    ]
  }
]

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

22.7%

Related for CVELIST:CVE-2020-6256