QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-6317

Back to search

CVE-2020-6317

Published: Nov 30, 2020

Modified: Aug 4, 2024

PUBLISHED

CVSS v3.0

2.6

LOW

Description

In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can access sensitive information which appears in the installation log files. This information although sensitive is of limited utility and cannot be used to further access, modify or render unavailable any other information in the cockpit or system. This affects SAP Adaptive Server Enterprise, Versions - 15.7, 16.0.

VendorProductVersions

SAP SE

SAP Adaptive Server Enterprise

affected
< 15.7
affected
< 16.0

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now