186 matches found
CVE-2020-6292: Insufficient Session Expiration
Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration...
PT-2020-19082
Name of the Vulnerable Software and Affected Versions SAP Disclosure Management version 10.1 Description The logout mechanism in the affected software does not properly invalidate one of the session cookies, resulting in insufficient session expiration. Recommendations For SAP Disclosure Manageme...
CVE-2020-6289: Cross-Site Request Forgery (CSRF)
SAP Disclosure Management, version 10.1, had insufficient protection against Cross-Site Request Forgery, which could be used to trick user in to browsing malicious site...
PT-2020-19081
Name of the Vulnerable Software and Affected Versions SAP Disclosure Management version 10.1 Description The session mechanism in SAP Disclosure Management does not have expiration data set, allowing unlimited access after authenticating once. This leads to insufficient session expiration,...
PT-2020-19079
Name of the Vulnerable Software and Affected Versions SAP Disclosure Management version 10.1 Description The issue is related to insufficient protection against Cross-Site Request Forgery, which could be used to trick a user into browsing a malicious site. Recommendations For SAP Disclosure...
PT-2020-19062 · Sap · Sap Disclosure Management
Name of the Vulnerable Software and Affected Versions: SAP Disclosure Management version 10.1 Description: The issue concerns sensitive cookies missing the HttpOnly flag in SAP Disclosure Management, which can lead to sensitive cookies being accessed without the HttpOnly flag. This affects the...
CVE-2020-6267: Sensitive Cookie Without 'HttpOnly' Flag
Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only flag...
SAP Disclosure Management Override Vulnerability
SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1, which stems...
CVE-2020-6209
SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check...
CVE-2020-6209
SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check...
Authorization
SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check...
CVE-2020-6209
SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check...
CVE-2020-6209
SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check...
CVE-2020-6209
CVE-2020-6209 affects SAP Disclosure Management, version 10.1, where an authenticated user with no roles can bypass authorization checks and access administration accounts due to a Missing Authorization Check. Multiple connected sources (Red Hat, CNVD, NVD/CVE and others) corroborate that the vul...
CVE-2020-6209: Missing Authorization
SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check...
PT-2020-19008
Name of the Vulnerable Software and Affected Versions SAP Disclosure Management version 10.1 Description The issue concerns a missing authorization check, allowing an authenticated user without roles to access administration accounts. Recommendations For SAP Disclosure Management version 10.1,...
SAP Disclosure Management XSS
The vulnerability of the SAP Disclosure Management software for generating financial reports is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
SAP Disclosure Management Cross-Site Scripting Vulnerability (CNVD-2020-03253)
SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A cross-site scripting vulnerability exists in SAP Disclosure Management versions prior ...