CVE Vulnerabilities

CVE-2020-6252

Published: May 12, 2020 | Modified: Jul 21, 2021
CVSS 3.x
8
HIGH
Source:
NVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
5.2 MEDIUM
AV:A/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact system availability.

Affected Software

Name Vendor Start Version End Version
Adaptive_server_enterprise_cockpit Sap 16.0 (including) 16.0 (including)

References