Vulnerability CVE-2020-6191
Published: 2020-02-12

Description:
SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation.

Type:

CWE-20

 (Improper Input Validation)

CVSS2 => (AV:N/AC:L/Au:S/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
9/10
10/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
SAP -> Landscape management 

 References:
https://launchpad.support.sap.com/#/notes/2878030
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812
Copyright 2024, cxsecurity.com

 

Back to Top