Authorization Bypass in SAP Solution Manager (JAVA Stack)
CVE-2020-26824

10CRITICAL

Key Information:

Vendor

SAP
Status
SAP Solution Manager (java Stack)
Vendor
CVE Published:
10 November 2020

What is CVE-2020-26824?

SAP Solution Manager's JAVA stack version 7.20 contains an authorization bypass vulnerability within the Upgrade Legacy Ports Service. An unauthenticated attacker could leverage this flaw to gain unauthorized access to the system, thereby affecting the integrity and availability of the services. It is crucial for organizations using this version to assess their security measures and apply appropriate patches to mitigate potential risks associated with this vulnerability.

Affected Version(s)

SAP Solution Manager (JAVA stack) < 7.20

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2985866
x_refsource_MISC

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.