Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2020-6265

SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization that has been configured by the system administrator due to the use of Hardcoded Credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP Commerce

  • < 6.7affected
  • < 1808affected
  • < 1811affected
  • < 1905affected

SAP SE SAP Commerce (Data Hub)

  • < 6.7affected
  • < 1808affected
  • < 1811affected
  • < 1905affected

References