CVEvulnerability
CVE-2020-6252
8.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-05-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.0 HIGH — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 9.0 CRITICAL — CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.2 MEDIUM — AV:A/AC:L/Au:S/C:P/I:P/A:P
Description
Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact system availability.
Affected configurations
• sap adaptive server enterprise cockpit 16.0
References
- https://launchpad.support.sap.com/#/notes/2917090 Permissions Required
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2917090 Permissions Required
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222 Vendor Advisory