CVE-2020-6209

published 2020-03-10

CVE-2020-6209: SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts…

high 7.5 CVSS 3.1

AV N AC H PR L UI N S U C H I H A H

SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	disclosure_management	—	—
sap_se	sap_disclosure_management	< 10.1	10.1

CWE-862