Skip to content
OpenAdvisories
Medium · 4.9 CVE-2020-26814 EUVD-2020-19350GHSA-mf63-wm8x-6475

SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys under certain condit…

Published Nov 10, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys under certain conditions in the PGP Module of Business-to-Business Add-On, these keys can then be used to read messages processed by the module leading to Information Disclosure.

Affected products

VendorProductAffectedFixed
SAP SE SAP Process Integration (PGP - Module Business-to-Business Add On) < 1.0 —

References