PT-2020-16505 · Sap · Sap Netweaver As Java

Published 2020-11-10 · Updated 2022-01-01 · CVE-2020-26820

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS JAVA versions 7.20, 7.30, 7.31, 7.40, 7.50

Description The issue allows an attacker who is authenticated as an administrator to use the administrator console to expose unauthenticated access to the file system and upload a malicious file. The attacker or another user can then use a separate mechanism to execute OS commands through the uploaded file, leading to Privilege Escalation and completely compromising the confidentiality, integrity, and availability of the server operating system and any application running on it.

Recommendations For SAP NetWeaver AS JAVA versions 7.20, 7.30, 7.31, 7.40, 7.50, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-26820

Affected Products

Sap Netweaver As Java

References · 9

• https://osv.dev/vulnerability/CVE-2020-26820 · Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/2979062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26820 · Security Note
• https://t.me/cvenotify/12753 · Telegram Post
• http://packetstormsecurity.com/files/162086/SAP-Java-OS-Remote-Code-Execution.html · Note
• https://t.me/cibsecurity/16104 · Telegram Post
• http://seclists.org/fulldisclosure/2021/Apr/7 · Note
• https://t.me/defcon_news/72989 · Telegram Post