PT-2020-19053 · Sap · Sap Identity Management

Published 2020-05-12 · Updated 2020-05-15 · CVE-2020-6258

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Identity Management version 8.0

Description The issue allows an attacker to view certain sensitive information of the victim due to missing authorization checks for an authenticated user.

Recommendations For SAP Identity Management version 8.0, apply the necessary patches or updates to include proper authorization checks.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2020-6258

Affected Products

Sap Identity Management

References · 4

• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6258 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6258 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/2915429 · Note