PT-2020-19066 · Sap · Sap Solution Manager

Published 2020-06-10 · Updated 2020-06-16 · CVE-2020-6271

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP Solution Manager (Problem Context Manager) version 7.2

Description The issue allows an attacker to consume large amounts of memory, causing the system to crash and potentially read restricted data, specifically files visible to technical administration users of the diagnostics agent, due to insufficient authentication.

Recommendations For SAP Solution Manager (Problem Context Manager) version 7.2, consider implementing additional authentication mechanisms to prevent unauthorized access and memory consumption. As a temporary workaround, restrict access to sensitive files and the diagnostics agent to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-91

Related Identifiers

CVE-2020-6271

Affected Products

Sap Solution Manager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-6271 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6271 · Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/2931391 · Note