Vulnerability · Published Apr 14, 2020 · Assigned by sap

CVE-2020-6225

Critical 9.1

In plain English

A critical-severity security flaw in SAP NetWeaver (Knowledge Management) (KMC-CM) from SAP SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).

Severity (CVSS 3.0)9.1Critical

Exploit odds (30 days)1.1%top 34.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through to the file APIs, allowing the attacker to overwrite, delete, or corrupt arbitrary files on the remote server, leading to Path Traversal.

Affected products (as reported)

Vendor	Product	Versions
SAP SE	SAP NetWeaver (Knowledge Management) (KMC-CM)	< 7.00< 7.01< 7.02< 7.30< 7.31< 7.40< 7.50
SAP SE	SAP NetWeaver (Knowledge Management) (KMC-WPC)	< 7.30< 7.31< 7.40< 7.50

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2896682 x_refsource_MISC