PT-2020-4201 · Sap · Sap Adaptive Extensions+1

Published 2020-04-14 · Updated 2020-04-15 · CVE-2020-6236

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SAP Landscape Management version 3.0 SAP Adaptive Extensions version 1.0

Description: The issue is related to insufficient access control in the SAP Landscape Management and SAP Adaptive Extensions systems. It allows a remote attacker to escalate their privileges to the root level. An attacker with admin group privileges can change the ownership and permissions of arbitrary files remotely, including setting the S-user ID bit, which enables executing these files as the root user from a non-root context.

Recommendations: For SAP Landscape Management version 3.0, consider restricting access to admin group privileges to minimize the risk of exploitation. For SAP Adaptive Extensions version 1.0, avoid using the S-user ID bit in file permissions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2020-04635

CVE-2020-6236

Affected Products

Sap Adaptive Extensions

Sap Landscape Management

References · 5

• https://launchpad.support.sap.com/#/notes/2902456 · Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6236 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6236 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04635 · Security Note