Disclosure Management Security Vulnerabilities and Issues — Disclosure Management CVE List

Lucene search

SapDisclosure Management

5 matches found

CVE•added 2020/07/14 1:15 p.m.•41 views

CVE-2020-6291

SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient Session Expiration

8.8CVSS8.5AI score0.00153EPSS

CVE•added 2020/07/14 1:15 p.m.•38 views

CVE-2020-6292

Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration.

8.8CVSS8.5AI score0.00198EPSS

CVE•added 2020/07/14 1:15 p.m.•35 views

CVE-2020-6290

SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID.

6.8CVSS6.2AI score0.00147EPSS

CVE•added 2020/07/14 1:15 p.m.•32 views

CVE-2020-6289

SAP Disclosure Management, version 10.1, had insufficient protection against Cross-Site Request Forgery, which could be used to trick user in to browsing malicious site.

8.8CVSS8.5AI score0.00101EPSS

CVE•added 2020/07/14 1:15 p.m.•29 views

CVE-2020-6267

Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only flag.

6.3CVSS5.4AI score0.00236EPSS