CVE-2020-6192

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.2HIGH
EPSS
0.2%
top 54.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Landscape ManagementSAP Landscape Management
Timeline
PublishedFeb 12
Latest updateMay 24

Description

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-2524-6f4r-2jq9: SAP Landscape Management, version 3↗2022-05-24
▶
CVEList
CVE-2020-6192: SAP Landscape Management, version 3↗2020-02-12
▶
CVE-2020-6192 (HIGH CVSS 7.2) | SAP Landscape Management | cvebase.io