Skip to content
OpenAdvisories
Critical · 10.0 Public exploit CVE-2020-6364 EUVD-2020-27514GHSA-w6w2-xxmc-3cmj

SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a c…

Published Oct 15, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP Solution Manager (CA Introscope Enterprise Manager) and SAP Focused Run (CA Introscope Enterprise Manager)

Description

SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection. With this, the attacker is able to read and modify all system files and also impact system availability.

Affected products

VendorProductAffectedFixed
SAP SE SAP Solution Manager (CA Introscope Enterprise Manager) and SAP Focused Run (CA Introscope Enterprise Manager) < WILY_INTRO_ENTERPRISE 9.7, < 10.1, < 10.5, < 10.7 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • gquere/CVE-2020-6364 ★ 2 · Aug 17, 2022

    Remote code execution in CA APM Team Center (Wily Introscope)

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References