Privilege Escalation Vulnerability in SAP Host Agent
CVE-2020-6234

7.2HIGH

Key Information:

Vendor

SAP
Status
SAP Host Agent
Vendor
CVE Published:
14 April 2020

What is CVE-2020-6234?

The SAP Host Agent version 7.21 presents a vulnerability that allows an attacker with administrative privileges to exploit the operation framework. This exploitation can lead to unauthorized root access to the underlying operating system, enabling a potential attacker to execute commands and take full control of the system.

Affected Version(s)

SAP Host Agent < 7.21

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2902645
x_refsource_MISC
http://seclists.org/fulldisclosure/2021/Apr/5
mailing-listx_refsource_FULLDISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.