445 matches found
Authentication flaw
SAP Solution Manager User Experience Monitoring, version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager...
CVE-2020-6198
SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...
CVE-2020-6207
SAP Solution Manager User Experience Monitoring, version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager...
CVE-2020-6207
SAP Solution Manager User Experience Monitoring, version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager...
CVE-2020-6207
CVE-2020-6207 affects SAP Solution Manager 7.2, specifically the End User Experience Monitoring (EEM) servlet. The vulnerability is due to missing authentication checks, allowing unauthenticated access that can compromise all connected SMDAgents and enables remote code execution or command execut...
CVE-2020-6198
SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...
CVE-2020-6198
CVE-2020-6198 affects SAP Solution Manager (Diagnostics Agent), Version 720. Root cause: Missing authentication allows unencrypted connections from unauthenticated sources, enabling an attacker to remotely control all agent functions. Documents cite high/critical impact (CVSS v3.1 base score 9.8)...
Fixed several vulnerabilities in SAP products.
Vulnerabilities have been fixed in SAP products. The vulnerabilities enable a malicious person to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS SQL Injection Denial-of-Service DoS. Remote code execution User Rights Access to sensitive data SAP reports a...
CVE-2020-6198: Missing Authentication for Critical Function
SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...
CVE-2020-6207
SAP Solution Manager User Experience Monitoring, version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager. Recent assessments: Assessed Attacker Value: 0 Assessed Attacke...
PT-2020-6763
Name of the Vulnerable Software and Affected Versions SAP Solution Manager Diagnostics Agent version 720 Description The issue is related to the transmission of data in an open format, allowing an attacker to gain unauthorized access to protected information. This is due to a missing authenticati...
CVE-2020-6207: Missing Authentication for Critical Function
SAP Solution Manager User Experience Monitoring, version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager...
PT-2020-5958
Name of the Vulnerable Software and Affected Versions SAP Solution Manager User Experience Monitoring version 7.2 Description The issue is related to a missing authentication check in a critical function of the SAP Solution Manager, allowing for the complete compromise of all SMDAgents connected ...
The vulnerability of the SAP Solution Manager platform, related to deficiencies in registration data management, allows a perpetrator to disclose protected information.
The vulnerability of the SAP Solution Manager software platform is related to deficiencies in the management of registration data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
SAP Solution Manager Trust Management Issue Vulnerability
SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...
CVE-2019-0307
Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to t...
Default credentials
Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to t...
CVE-2019-0307
Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to t...
CVE-2019-0307
Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default. By decoding these credentials, an attacker with admin privileges could gain access to t...
CVE-2019-0307
CVE-2019-0307 affects SAP Solution Manager Diagnostics Agent (SMDAgent) in version 7.2. The issue arises from unencrypted storage of credentials (in SAP Secure Storage) such as SLD connection and Solman communications, which can be decoded by an admin and used to access the entire configuration. ...