Information Disclosure Vulnerability in SAP Adaptive Server Enterprise

CVE-2020-6250

What is CVE-2020-6250?

An authenticated attacker could exploit misconfigured endpoints in SAP Adaptive Server Enterprise version 16.0, which are exposed over the adjacent network. This vulnerability allows unauthorized access to the system administrator's password, resulting in potential information disclosure. The attacker could leverage this access to read and write data, perform administrative actions, or disrupt the server's operation.

References