CVE-2020-6270

Published: Jun 10, 2020Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Authorization Check, allowing wrong and unexpected change of individual conditions by a malicious user leading to wrong prices.

Affected (11)

Products: Sap: Netweaver Application Server Abap

Sap

1 product

Netweaver Application Server Abap

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Application Server Abap	Version 710
Sap Netweaver Application Server Abap	Version 711
Sap Netweaver Application Server Abap	Version 740
Sap Netweaver Application Server Abap	Version 750
Sap Netweaver Application Server Abap	Version 751
Sap Netweaver Application Server Abap	Version 752
Sap Netweaver Application Server Abap	Version 75a
Sap Netweaver Application Server Abap	Version 75b
Sap Netweaver Application Server Abap	Version 75c
Sap Netweaver Application Server Abap	Version 75d
Sap Netweaver Application Server Abap	Version 75e