CVE-2020-6190

Опубликовано: 12 фев. 2020

Источник: nvd

CVSS3: 5.8

CVSS2: 5

EPSS Низкий

Описание

Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system like hostname, server node and installation path that could be misused by an attacker leading to Information Disclosure.

Ссылки

https://launchpad.support.sap.com/#/notes/2838835
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812
Vendor Advisory
https://launchpad.support.sap.com/#/notes/2838835
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:netweaver_application_server_java:7.30:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:7.31:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:7.40:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00261

Низкий

5.8 Medium

CVSS3

5.8 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-p5jp-pq7c-j82g

github

больше 3 лет назад

EPSS

Процентиль: 49%

0.00261

Низкий

5.8 Medium

CVSS3

5.8 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200