Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-6299 EUVD-2020-27449GHSA-r2rc-w6vq-wmhv

SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of u…

Published Aug 12, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver ABAP Server and ABAP Platform

Description

SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 740, 750, 751, 752, 753, 754, 755, allows a business user to access the list of users in the given system using value help, leading to Information Disclosure.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver (ABAP Server) and ABAP Platform < 740, < 750, < 751, < 752, < 753, < 754, < 755 —

References