CVE-2020-6191

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.2HIGH
EPSS
0.4%
top 36.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Landscape ManagementSAP Landscape Management
Timeline
PublishedFeb 12
Latest updateMay 24

Description

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-6xf9-38qw-rvjg: SAP Landscape Management, version 3↗2022-05-24
▶
CVEList
CVE-2020-6191: SAP Landscape Management, version 3↗2020-02-12
▶
CVE-2020-6191 (HIGH CVSS 7.2) | SAP Landscape Management | cvebase.io