CVE Intelligence

Vulnerabilidades do SAP SE SAP NetWeaver AS JAVA (LM Configuration Wizard)

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam SAP SE SAP NetWeaver AS JAVA (LM Configuration Wizard): 1 registro(s), com versões afetadas e correções.

CVE-2020-6287 Crítica · 10.0 KEV Urgente · 83 Exploit público CWE-306 14/07/2020
SAP NetWeaver Missing Authentication for Critical Function Vulnerability
SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an administrative user, and therefore compromising Confidentiality, Integrity and Availability of the system, leading to Missing Authentication Check.