SAP Adaptive Server Enterprise (Cockpit) 16.0 Information Disclosure Vulnerability

CVE-2020-6252 · HIGH Severity

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Under certain conditions SAP Adaptive Server Enterprise (Cockpit), version 16.0, allows an attacker with access to local network, to get sensitive and confidential information, leading to Information Disclosure. It can be used to get user account credentials, tamper with system data and impact system availability.

Learn more about our Cis Benchmark Audit For Server Software.