Unauthorized Access Vulnerability in SAP Solution Manager (JAVA stack)
CVE-2020-26823

10CRITICAL

Key Information:

Vendor

SAP
Status
SAP Solution Manager (java Stack)
Vendor
CVE Published:
10 November 2020

What is CVE-2020-26823?

SAP Solution Manager (JAVA stack) version 7.20 contains a vulnerability that allows unauthenticated attackers to exploit missing authorization checks in the Upgrade Diagnostics Agent Connection Service. This flaw poses risks to the integrity and availability of the affected service, potentially allowing malicious actors to manipulate system operations without authentication. It is crucial for system administrators to implement necessary security measures to safeguard against this vulnerability.

Affected Version(s)

SAP Solution Manager (JAVA stack) < 7.20

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2985866
x_refsource_MISC

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.