Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-6310 EUVD-2020-27460GHSA-cvcj-pj4r-5rm5

Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 74…

Published Aug 12, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver (ABAP Server) and ABAP Platform < 702, < 730, < 731, < 740, < 750 —

References