CVE-2020-6183
- State
- Published
- Severity
- 5.3 Medium
- Published
- Feb 12, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jan 8, 2020
Description
SAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to the shared memory by sending request to the main SAPOSCOL process and receive responses that may contain data read with user root privileges e.g. size of any directory, system hardware and OS details, leading to Missing Authorization Check vulnerability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | sap |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
SAP Host AgentSAP SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.