CVE-2020-6265
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization that has been configured by the system administrator due to the use of Hardcoded Credentials.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SAP SE | SAP Commerce | < 6.7 | affected |
| SAP SE | SAP Commerce | < 1808 | affected |
| SAP SE | SAP Commerce | < 1811 | affected |
| SAP SE | SAP Commerce | < 1905 | affected |
| SAP SE | SAP Commerce (Data Hub) | < 6.7 | affected |
| SAP SE | SAP Commerce (Data Hub) | < 1808 | affected |
| SAP SE | SAP Commerce (Data Hub) | < 1811 | affected |
| SAP SE | SAP Commerce (Data Hub) | < 1905 | affected |
Weaknesses
- CWE-798: CWE-798
ADP Enrichment
CVE Program Container
Additional References
- https://launchpad.support.sap.com/#/notes/2918924
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775
References
- https://launchpad.support.sap.com/#/notes/2918924
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.