CVE-2020-6234

概要

参考情報

• packetstormsecurity.com/files/162084/SAP-Host-Control-Local-Privilege-Escalation.html · Third Party Advisory
• seclists.org/fulldisclosure/2021/Apr/5 · Mailing List
• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

host agent のその他の脆弱性

• CVE-2024-47595高 7.1An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful explo…
• CVE-2023-40309緊急 9.8SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authe…
• CVE-2023-40308高 7.5SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption e…
• CVE-2023-36926中 5.3Due to missing authentication check in SAP Host Agent - version 7.22, an unauthenticated attacker can set an undocumented parameter to a par…
• CVE-2023-27498高 7.2SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start …