CVE-2020-6295
CVE-2020-6295
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 ago 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encrypted sensitive and confidential information through publicly readable installation log files leading to a compromise of the installed Cockpit. This compromise could enable the attacker to view, modify and/or make unavailable any data associated with the Cockpit, leading to Information Disclosure.
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
SAP SE · SAP Adaptive Server Enterprise¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →