Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2020-6263

Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; CORE-TOOLS 7.00, 7.01,

Description

Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; CORE-TOOLS 7.00, 7.01, 7.02, 7.05, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50) do not perform any authentication checks for operations that require user identity leading to Authentication Bypass.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP NetWeaver AS JAVA

  • < SAP-JEECOR 7.00affected
  • < 7.01 SERVERCOR 7.10affected
  • < 7.11affected
  • < 7.20affected
  • < 7.30affected
  • < 7.31affected
  • < 7.40affected
  • < 7.50 CORE-TOOLS 7.00affected
  • < 7.01affected
  • < 7.02affected
  • < 7.05affected
  • < 7.10affected
  • < 7.50affected

References