Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-6265 EUVD-2020-27415GHSA-cqwc-4m4r-gw28

SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass…

Published Jun 9, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization that has been configured by the system administrator due to the use of Hardcoded Credentials.

Affected products

VendorProductAffectedFixed
SAP SE SAP Commerce < 6.7, < 1808, < 1811, < 1905 —
SAP SE SAP Commerce (Data Hub) < 6.7, < 1808, < 1811, < 1905 —

References