SB2020071405 - Multiple vulnerabilities in SAP Disclosure Management
Published: July 14, 2020
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 5 secuirty vulnerabilities.
1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-6267)
The vulnerability allows a remote attacker to bypass certain security restrictions.
The vulnerability exists due to unspecified error within the SAP Disclosure Management. A remote non-authenticated attacker can gain unauthorized access to the application.
2) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-6289)
The vulnerability allows a remote attacker to bypass certain security restrictions.
The vulnerability exists due to unspecified error within the SAP Disclosure Management. A remote non-authenticated attacker can gain unauthorized access to the application.
3) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-6290)
The vulnerability allows a remote attacker to bypass certain security restrictions.
The vulnerability exists due to unspecified error within the SAP Disclosure Management. A remote non-authenticated attacker can gain unauthorized access to the application.
4) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-6291)
The vulnerability allows a remote attacker to bypass certain security restrictions.
The vulnerability exists due to unspecified error within the SAP Disclosure Management. A remote non-authenticated attacker can gain unauthorized access to the application.
5) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2020-6292)
The vulnerability allows a remote attacker to bypass certain security restrictions.
The vulnerability exists due to unspecified error within the SAP Disclosure Management. A remote non-authenticated attacker can gain unauthorized access to the application.
Remediation
Install update from vendor's website.