CVE-2020-26814

Katalog CVE

CVSS 4.9 · Medium EPSS 0,91%

Kerentanan pada sap process integration (pgp module - business-to-business add on). Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys under certain conditions in the PGP Module of Business-to-Business Add-On, these keys can then be used to read messages processed by the module leading to Information Disclosure.

Rincian

Terbit di NVD

10 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

0,91% peluang dieksploitasi; lebih tinggi dari 58,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571 advisory vendor
• https://launchpad.support.sap.com/#/notes/2952084 permissions required