Information Disclosure Vulnerability in SAP Adaptive Server Enterprise
CVE-2020-6317

2.6LOW

Key Information:

Vendor

SAP
Status
SAP Adaptive Server Enterprise
Vendor
CVE Published:
30 November 2020

What is CVE-2020-6317?

This vulnerability allows an attacker with regular user credentials and local access to an ASE cockpit installation to view sensitive information contained in the installation log files. Although this information is sensitive, its utility is limited as it does not permit further access or manipulation of other data within the cockpit or overall system.

Affected Version(s)

SAP Adaptive Server Enterprise < 15.7 < 15.7

SAP Adaptive Server Enterprise < 16.0 < 16.0

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2953203
x_refsource_MISC

CVSS V3.1

Score:
2.6
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-6317 : Information Disclosure Vulnerability in SAP Adaptive Server Enterprise