CVE-2020-6295: Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encrypted sensitive and confidential information…

high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encrypted sensitive and confidential information through publicly readable installation log files leading to a compromise of the installed Cockpit. This compromise could enable the attacker to view, modify and/or make unavailable any data associated with the Cockpit, leading to Information Disclosure.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	adaptive_server_enterprise	—	—
sap_se	sap_adaptive_server_enterprise	< 16.0	16.0