CVE-2020-6307 MEDIUM

CVE-2020-6307

Vendor Sap Se
Product Automated Note Search Tool (SAP Basis)
Published January 14, 2020
Last update August 4, 2024

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.

Key dates

02Disclosure timeline

January 14, 2020 CVE published
August 4, 2024 Record updated