CVE-2020-26820
9.1
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Summary
SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, to expose unauthenticated access to the file system and upload a malicious file. The attacker or another user can then use a separate mechanism to execute OS commands through the uploaded file leading to Privilege Escalation and completely compromise the confidentiality, integrity and availability of the server operating system and any application running on it.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SAP SE | SAP NetWeaver AS JAVA | < 7.20 | affected |
| SAP SE | SAP NetWeaver AS JAVA | < 7.30 | affected |
| SAP SE | SAP NetWeaver AS JAVA | < 7.31 | affected |
| SAP SE | SAP NetWeaver AS JAVA | < 7.40 | affected |
| SAP SE | SAP NetWeaver AS JAVA | < 7.50 | affected |
Weaknesses
- Privilege escalation
ADP Enrichment
CVE Program Container
Additional References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571
- https://launchpad.support.sap.com/#/notes/2979062
- http://seclists.org/fulldisclosure/2021/Apr/7
- http://packetstormsecurity.com/files/162086/SAP-Java-OS-Remote-Code-Execution.html
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571
- https://launchpad.support.sap.com/#/notes/2979062
- http://seclists.org/fulldisclosure/2021/Apr/7
- http://packetstormsecurity.com/files/162086/SAP-Java-OS-Remote-Code-Execution.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.