CVE-2020-6224

Katalog CVE

CVSS 6.2 · Medium EPSS 1,1%

Kerentanan Insertion of Sensitive Information into Log File pada sap netweaver application server java. Skor CVSS 3.1 6.2 (Medium) menurut NVD.

Deskripsi (NVD)

SAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files, when the user logs in and sends request with login credentials, leading to Information Disclosure.

Rincian

Terbit di NVD

14 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.2 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-532: Insertion of Sensitive Information into Log File

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 64,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://launchpad.support.sap.com/#/notes/2826528 permissions required · advisory vendor
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 advisory vendor