CVE-2020-6250
Last modified
CVE-2020-6250 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop the server like an administrator.. EPSS estimates a 0.52% chance of exploitation in the next 30 days.
Description
SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop the server like an administrator.
Metrics
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sap | Adaptive Server Enterprise | 16.0 |
References
- https://launchpad.support.sap.com/#/notes/2917022Permissions Required
- https://launchpad.support.sap.com/#/notes/2917022Permissions Required
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-6250?
How severe is CVE-2020-6250?
How do I fix CVE-2020-6250?
Are you affected by CVE-2020-6250?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST