CVE-2020-6207
Kritik CISA KEV: Aktif İstismarTeknik Veri (Otomatik)
- CVSS Skoru
- 9.8
- EPSS
- 98.1%
- CWE
- CWE-306
- KEV Durumu
- Evet
Yayım tarihi: 10 Mart 2020 · CISA KEV son iyileştirme tarihi: 3 Mayıs 2022
Etkilenen: sap solution_manager
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgents connected to the Solution Manager.
Referanslar
- http://packetstormsecurity.com/files/161993/SAP-Solution-Manager-7.2-Remote-Command-Execution.html
- http://packetstormsecurity.com/files/162083/SAP-SMD-Agent-Unauthenticated-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/163168/SAP-Solution-Manager-7.20-Missing-Authorization.html
- http://seclists.org/fulldisclosure/2021/Apr/4
- http://seclists.org/fulldisclosure/2021/Jun/34
- https://launchpad.support.sap.com/#/notes/2890213
Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.