SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, this has an impact to the integrity and availability of the service.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:HSap Solution Manager
APPSap7.20
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
Related vulnerabilities
CVE-2020-6207CRITICAL9.8⚠ KEVPL ✓same product
SAP Solution Manager 7.2 – brak uwierzytelnienia w module UX Monitoring
CVE-2022-22544CRITICAL9.1PL ✓same product
SAP Solution Manager: wykonanie kodu na podłączonych agentach przez administratora
CVE-2020-26837CRITICAL9.1PL ✓same product
SAP Solution Manager 7.2 – path traversal via upload złośliwego skryptu
CVE-2020-26824CRITICAL10.0PL ✓same product
SAP Solution Manager — brak autoryzacji w Upgrade Legacy Ports Service (RCE/DoS)
CVE-2020-26821CRITICAL10.0PL ✓same product
SAP Solution Manager – brak autoryzacji w SVG Converter Service (RCE/DoS)