CVE-2020-26823

State: Published
Severity: 10.0 Critical
Published: Nov 10, 2020
Updated: Aug 4, 2024
Reserved: Oct 7, 2020

Description

SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service.

Scores

CVSS	Score	Vector	Source
3.0	10.0 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H	sap

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
SAP Solution Manager (JAVA stack)SAP SE	< 7.20Affected

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571
https://launchpad.support.sap.com/#/notes/2985866

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.