Unauthorized Access Vulnerability in SAP Solution Manager by SAP
CVE-2020-26822

10CRITICAL

Key Information:

Vendor
SAP
Status
SAP Solution Manager (java Stack)
Vendor
CVE Published:
10 November 2020

Summary

The vulnerability in SAP Solution Manager (JAVA stack) version 7.20 allows unauthenticated attackers to exploit the system due to missing authorization checks in the Outside Discovery Configuration Service. This can lead to significant risks to the integrity and availability of the affected service, potentially compromising the overall security posture of organizations utilizing this SAP product.

Affected Version(s)

SAP Solution Manager (JAVA stack) < 7.20

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2985866
x_refsource_MISC

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.