CVE-2020-6369

3 documents3 sources
Severity
5.9MEDIUM
EPSS
1.2%
top 20.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
SAP SE CA Introscope Enterprise Manager (affected Products: SAP Solution Manager AND SAP Focused Run)SAP Focused RUNSAP Solution Manager
Timeline
PublishedOct 20
Latest updateMay 24

Description

SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an unauthenticated attackers to bypass the authentication if the default passwords for Admin and Guest have not been changed by the administrator.This may impact the confidentiality of the service.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages3 packages

▶NVDsap/solution_manager4 versions+3
▶NVDsap/focused_run4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-xmcm-xxvc-j56r: SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9↗2022-05-24
▶
CVEList
CVE-2020-6369: SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9↗2020-10-20
▶
CVE-2020-6369 (MEDIUM CVSS 5.9) | SAP Solution Manager and SAP Focuse | cvebase.io