Unauthorized Access Vulnerability in SAP Solution Manager (JAVA stack)
CVE-2020-26823
10CRITICAL
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 10 November 2020
What is CVE-2020-26823?
SAP Solution Manager (JAVA stack) version 7.20 contains a vulnerability that allows unauthenticated attackers to exploit missing authorization checks in the Upgrade Diagnostics Agent Connection Service. This flaw poses risks to the integrity and availability of the affected service, potentially allowing malicious actors to manipulate system operations without authentication. It is crucial for system administrators to implement necessary security measures to safeguard against this vulnerability.
Affected Version(s)
SAP Solution Manager (JAVA stack) < 7.20