CVE-2020-6203
Last modified
CVE-2020-6203 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs, leading to Path Traversal.. EPSS estimates a 1.86% chance of exploitation in the next 30 days.
Description
SAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs, leading to Path Traversal.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sap | Netweaver | 7.10 |
| Sap | Netweaver | 7.11 |
| Sap | Netweaver | 7.20 |
| Sap | Netweaver | 7.30 |
| Sap | Netweaver | 7.31 |
| Sap | Netweaver | 7.40 |
| Sap | Netweaver | 7.50 |
References
- https://launchpad.support.sap.com/#/notes/2806198Permissions Required
- https://launchpad.support.sap.com/#/notes/2806198Permissions Required
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-6203?
How severe is CVE-2020-6203?
How do I fix CVE-2020-6203?
Are you affected by CVE-2020-6203?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST