CVE-2020-6267

CWE-1004CWE-732 — Incorrect Permission Assignment3 documents3 sources
Severity
5.4MEDIUM
EPSS
0.2%
top 61.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Disclosure ManagementSAP Disclosure Management
Timeline
PublishedJul 14
Latest updateMay 24

Description

Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only flag.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.5

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-wjw2-9cj6-hcph: Some sensitive cookies in SAP Disclosure Management, version 10↗2022-05-24
▶
CVEList
CVE-2020-6267: Some sensitive cookies in SAP Disclosure Management, version 10↗2020-07-14
▶
CVE-2020-6267 (MEDIUM CVSS 5.4) | Some sensitive cookies in SAP Discl | cvebase.io