CVE-2020-6215

Sažetak

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.

Reference

https://launchpad.support.sap.com/#/notes/2872782
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
http://seclists.org/fulldisclosure/2023/Oct/13

CVSS

Base:	5.8
Impact:	4.9
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	NONE

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:P/A:N

Zadnje važnije ažuriranje

06-10-2023 - 06:15

Objavljeno

14-04-2020 - 20:15