2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2020-6310" ,
"sourceIdentifier" : "cna@sap.com" ,
"published" : "2020-08-12T14:15:14.767" ,
2024-11-23 13:10:58 +00:00
"lastModified" : "2024-11-21T05:35:29.030" ,
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure."
} ,
{
"lang" : "es" ,
"value" : "Un control de acceso inapropiado en el componente SOA Configuration Trace en SAP NetWeaver (ABAP Server) y la plataforma ABAP, versiones - 702, 730, 731, 740, 750, permite a cualquier usuario autenticado enumerar todos los usuarios de SAP, conllevando a una Divulgaci\u00f3n de Informaci\u00f3n"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 4.3 ,
"baseSeverity" : "MEDIUM" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "NONE" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 1.4
}
] ,
"cvssMetricV30" : [
{
"source" : "cna@sap.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 4.3 ,
"baseSeverity" : "MEDIUM" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "NONE" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 1.4
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N" ,
2024-11-23 13:10:58 +00:00
"baseScore" : 4.0 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "SINGLE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "NONE" ,
2024-11-23 13:10:58 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:7.31:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D7E7672B-1021-4592-AA5F-2B51B63627BA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:7.40:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4AB22F97-3C28-4AA0-8BA2-84559AB56279"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:7.50:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A7AAA98F-50DD-4752-8D42-1E7B5B93BDB1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:700:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9AA5D36E-BE80-422B-8A6B-0ABDDE274146"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:701:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C04D8608-83F0-4D7F-A7A9-59B616240F14"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:702:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E4DF5956-1396-41FA-B101-E24F7898D135"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:710:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "ADE0E878-BE4E-4CFD-907D-7ABB745A4CE8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:711:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D14E8DCD-B365-4FC0-B08C-1A89787111C9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:751:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "65320F25-669B-40D8-A246-07B0202C00A9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:753:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E1C86F45-445E-4970-A378-199A35B23F4B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:abap_platform:755:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5B48E0FF-814F-4F9C-B5B1-87D978E1B4A4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "98B2522A-B850-4EC2-B2F2-5EBF36801B39"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:710:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9B5BF1EC-C2A6-486B-8E63-0A7ED431C1F0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:711:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "17847B21-8BE6-4359-913B-B6592D37C655"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://launchpad.support.sap.com/#/notes/2944988" ,
"source" : "cna@sap.com" ,
"tags" : [
"Permissions Required"
]
} ,
{
"url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345" ,
"source" : "cna@sap.com" ,
"tags" : [
"Vendor Advisory"
]
2024-11-23 13:10:58 +00:00
} ,
{
"url" : "https://launchpad.support.sap.com/#/notes/2944988" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Permissions Required"
]
} ,
{
"url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}