Riskcovery

CVE-2020-6363

State
Published
Severity
Not scored
Published
Oct 15, 2020
Updated
Aug 4, 2024
Reserved
Jan 8, 2020

Read the record on cve.org

Description

SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a user. These sessions are established after the user has authenticated with username/passphrase credentials. The user can change their own passphrase, but this does not invalidate active sessions that the user may have with SAP Commerce Cloud web applications, which gives an attacker the opportunity to reuse old session credentials, resulting in Insufficient Session Expiration.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SAP Commerce CloudSAP SE
  • < 1808Affected
  • < 1811Affected
  • < 1905Affected
  • < 2005Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.