cvelist/2020/6xxx/CVE-2020-6191.json

75 lines
2.4 KiB
JSON
Raw Normal View History

2020-01-08 14:01:26 +00:00
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-6191",
2020-02-12 20:01:08 +00:00
"ASSIGNER": "cna@sap.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "SAP SE",
"product": {
"product_data": [
{
"product_name": "SAP Landscape Management",
"version": {
"version_data": [
{
"version_name": "=",
"version_value": "3.0"
}
]
}
}
]
}
}
]
}
2020-01-08 14:01:26 +00:00
},
"description": {
"description_data": [
{
"lang": "eng",
2020-02-12 20:01:08 +00:00
"value": "SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation."
}
]
},
"impact": {
"cvss": {
"baseScore": "7.2",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Missing input validation"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812",
"refsource": "MISC",
"name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812"
},
{
"url": "https://launchpad.support.sap.com/#/notes/2878030",
"refsource": "MISC",
"name": "https://launchpad.support.sap.com/#/notes/2878030"
2020-01-08 14:01:26 +00:00
}
]
}
}