The vulnerability of the SAP Landscape Management automation system and the installation of SAP Adaptive Extensions, due to deficiencies in access control, allows attackers to elevate their privileges to the root level.

The vulnerability of the SAP Landscape Management automation system and the installation of SAP Adaptive Extensions is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level...

SAP Landscape Management Elevation of Privilege Vulnerability

SAP Landscape Management is a centralized SAP product management system from SAP. The system is used to centrally manage and configure SAP software systems running in physical, virtual, and cloud infrastructures. A security vulnerability exists in SAP Landscape Management version 3.0 and SAP...

CVE-2020-6236

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admingroup privileges to change ownership and permissions including S-user ID bit s-bit of arbitrary files remotely. This results in the possibility to execute these files as root user from a...

CVE-2020-6236

CVE-2020-6236 affects SAP Landscape Management v3.0 and SAP Adaptive Extensions v1.0. An attacker with admin_group privileges can remotely change ownership and permissions (including S-user ID bit) of arbitrary files, enabling execution of those files as root from a non-root context and causing p...

CVE-2020-6236

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admingroup privileges to change ownership and permissions including S-user ID bit s-bit of arbitrary files remotely. This results in the possibility to execute these files as root user from a...