Lucene search
SapCVELIST:CVE-2020-6310HistoryAug 12, 2020 - 1:52 p.m.
CVE-2020-6310
2020-08-1213:52:51
sap
www.cve.org
8
improper access control
sap netweaver
information disclosure
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.6
Confidence
High
EPSS
0.001
Percentile
22.7%
Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.
CNA Affected
[
{
"product": "SAP NetWeaver (ABAP Server) and ABAP Platform",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 702"
},
{
"status": "affected",
"version": "< 730"
},
{
"status": "affected",
"version": "< 731"
},
{
"status": "affected",
"version": "< 740"
},
{
"status": "affected",
"version": "< 750"
}
]
}
]Related
prion
prion
Improper access control
2020-08-12 14:15:00
nvd
nvd
CVE-2020-6310
2020-08-12 14:15:14
cve
cve
CVE-2020-6310
2020-08-12 14:15:14
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.6
Confidence
High
EPSS
0.001
Percentile
22.7%
Related for CVELIST:CVE-2020-6310