CVE-2020-6256

5.4MEDIUM

Key Information:

Vendor
SAP
Status
SAP Master Data Governance
Vendor
CVE Published:
12 May 2020

Summary

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check.

Affected Version(s)

SAP Master Data Governance < 748 < 748

SAP Master Data Governance < 749 < 749

SAP Master Data Governance < 750 < 750

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2912747
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.