CVE-2020-6292

Mô tả

Tham khảo

• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

Lỗ hổng khác của disclosure management

• CVE-2022-41274TRUNG BÌNH 6.5SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read se…
• CVE-2020-26828TRUNG BÌNH 6.4SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. …
• CVE-2020-6291CAO 8.8SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authent…
• CVE-2020-6290TRUNG BÌNH 6.3SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specifi…
• CVE-2020-6289CAO 8.8SAP Disclosure Management, version 10.1, had insufficient protection against Cross-Site Request Forgery, which could be used to trick user i…