Vulnerability · Published Nov 30, 2020 · Assigned by sap
CVE-2020-6317
Low 2.6
In plain English
A low-severity security flaw in SAP Adaptive Server Enterprise from SAP SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.0)2.6Low
Exploit odds (30 days)0.4%top 70.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can access sensitive information which appears in the installation log files. This information although sensitive is of limited utility and cannot be used to further access, modify or render unavailable any other information in the cockpit or system. This affects SAP Adaptive Server Enterprise, Versions - 15.7, 16.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP SE | SAP Adaptive Server Enterprise | < 15.7< 16.0 |
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 x_refsource_MISC
- https://launchpad.support.sap.com/#/notes/2953203 x_refsource_MISC