Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2020-6181

Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754),

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP NetWeaver (SAP Basis)

  • = 7.02affected
  • = 7.30affected
  • = 7.31affected
  • = 7.40affected

SAP SE SAP ABAP Platform (SAP Basis)

  • = 7.50affected
  • = 7.51affected
  • = 7.52affected
  • = 7.53affected
  • = 7.54affected

References