5.9
CVE-2020-6369
- EPSS 2.67%
- Veröffentlicht 20.10.2020 14:15:14
- Zuletzt bearbeitet 21.11.2024 05:35:35
- Erkennungen
LoginSAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an unauthenticated attackers to bypass the authentication if the default passwords for Admin and Guest have not been changed by the administrator.This may impact the confidentiality of the service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Focused Run Version 9.7
SAP ≫ Focused Run Version 10.1
SAP ≫ Focused Run Version 10.5
SAP ≫ Focused Run Version 10.7
SAP ≫ Solution Manager Version 9.7
SAP ≫ Solution Manager Version 10.1
SAP ≫ Solution Manager Version 10.5
SAP ≫ Solution Manager Version 10.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.67% | 0.843 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
| SAP | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196
http://packetstormsecurity.com/files/163159/SAP-Wily-Introscope-Enterprise-Default-Hard-Coded-Credentials.html
http://seclists.org/fulldisclosure/2021/Jun/31
https://launchpad.support.sap.com/#/notes/2971638