by Kastro
Paper/Archive/CVE-2020-6287

CVE-2020-6287

SAP SE SAP NetWeaver AS JAVA (LM Configuration Wizard) — SAP NetWeaver Missing Authentication for Critical Function Vulnerability

KEV · due 3 MayEPSS 95%public exploitSSVC actCVSS 10.0
critical.is priorityof 100
100
CVSS 10.0 (CNA)10.0 / 10 × 3030.0In CISA KEV+3030.0EPSS percentile 99.9.999 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an administrative user, and therefore compromising Confidentiality, Integrity and Availability of the system, leading to Missing Authentication Check.

Affected

ProductAffectedFixed inSource
SAP NetWeaver AS JAVA (LM Configuration Wizard)< 7.30–CNA
SAP NetWeaver AS JAVA (LM Configuration Wizard)< 7.31–CNA
SAP NetWeaver AS JAVA (LM Configuration Wizard)< 7.40–CNA
SAP NetWeaver AS JAVA (LM Configuration Wizard)< 7.50–CNA

Scores by source

sap (CNA)10.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refwiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675reflaunchpad.support.sap.com/#/notes/2934135refonapsis.com/recon-sap-cyber-security-vulnerabilityrefseclists.org/fulldisclosure/2021/Apr/6refpacketstormsecurity.com/files/162085/SAP-JAVA-Configuration-Task-Execution.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-6287kevcisa.gov/known-exploited-vulnerabilities-catalog