PT-2020-19048 · Sap · Sap Adaptive Server Enterprise

Published 2020-05-12 · Updated 2021-07-21 · CVE-2020-6252

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise (Cockpit) version 16.0

Description The issue allows an attacker with access to the local network to obtain sensitive and confidential information, potentially leading to information disclosure. This can be exploited to access user account credentials, tamper with system data, and impact system availability.

Recommendations For SAP Adaptive Server Enterprise (Cockpit) version 16.0, update to a version that includes a fix for this issue, as no specific workaround is provided in the available information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-6252

Affected Products

Sap Adaptive Server Enterprise

References · 4

• https://osv.dev/vulnerability/CVE-2020-6252 · Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6252 · Security Note
• https://launchpad.support.sap.com/#/notes/2917090 · Note