CVE-2020-26832

Exploit

EPSS 2.16%
Veröffentlicht 09.12.2020 17:15:31
Zuletzt bearbeitet 21.11.2024 05:20:21
Erkennungen
Login

SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA (SAP Landscape Transformation), versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should be restricted, however due to missing authorization an attacker can get access to some sensitive internal information of vulnerable SAP system or to make vulnerable SAP systems completely unavailable.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 7

NVD 13 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

SAP ≫ Netweaver Application Server Abap Version 2011_1_620

SAP ≫ Netweaver Application Server Abap Version 2011_1_640

SAP ≫ Netweaver Application Server Abap Version 2011_1_700

SAP ≫ Netweaver Application Server Abap Version 2011_1_710

SAP ≫ Netweaver Application Server Abap Version 2011_1_730

SAP ≫ Netweaver Application Server Abap Version 2011_1_731

SAP ≫ Netweaver Application Server Abap Version 2011_1_752

SAP ≫ Netweaver Application Server Abap Version 2020

SAP ≫ S/4 Hana Version 101

SAP ≫ S/4 Hana Version 102

SAP ≫ S/4 Hana Version 103

SAP ≫ S/4 Hana Version 104

SAP ≫ S/4 Hana Version 105

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.16%	0.799

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.6	2.3	4.7	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H
NIST	7.5	8	7.8	AV:N/AC:L/Au:S/C:P/I:N/A:C
SAP	7.6	2.3	4.7	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H