SQL Injection Vulnerability in SAP Master Data Governance

CVE-2020-6249

What is CVE-2020-6249?

The vulnerability within SAP Master Data Governance arises from the improper handling of crafted database queries via the admin backend report. This imperfection allows attackers to execute unauthorized queries, potentially exposing sensitive data and back-end database structures. The affected versions suffer from flawed input validation, which can be exploited to manipulate the database, resulting in significant security risks. Organizations using these versions should prioritize remediation to mitigate potential attacks.

References