CVEvulnerability

CVE-2020-6307

4.3 MEDIUM Published 2020-01-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.0 ([email protected])
4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-863

Description

Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.

Affected configurations

• sap basis 7.0 • sap basis 7.01 • sap basis 7.02 • sap basis 7.31 • sap basis 7.40 • sap basis 7.50 • sap basis 7.51 • sap basis 7.52 • sap basis 7.53 • sap basis 7.54

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References