Vulnerability · Published Oct 15, 2020 · Assigned by sap
CVE-2020-6364
Critical 10.0
In plain English
A critical-severity security flaw in SAP Solution Manager (CA Introscope Enterprise Manager) and SAP Focused Run (CA Introscope Enterprise Manager) from SAP SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 6.4% (higher than 94% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection. With this, the attacker is able to read and modify all system files and also impact system availability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP SE | SAP Solution Manager (CA Introscope Enterprise Manager) and SAP Focused Run (CA Introscope Enterprise Manager) | < WILY_INTRO_ENTERPRISE 9.7< 10.1< 10.5< 10.7 |
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196 x_refsource_MISC
- https://launchpad.support.sap.com/#/notes/2969828 x_refsource_MISC
- 20210614 Onapsis Security Advisory 2021-0008: OS Command Injection in CA Introscope Enterprise Manager mailing-list, x_refsource_FULLDISC
- http://packetstormsecurity.com/files/163153/SAP-Wily-Introscope-Enterprise-OS-Command-Injection.html x_refsource_MISC