CVE-2020-6239
CVE-2020-6239
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.4EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
10 Jun 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permissions to view SYSTEM user password in clear text, leading to Information Disclosure.
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
SAP SE · SAP Business One (Backup service)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →