VULNERABILITY INTELLIGENCE

CVE-2020-6258

CVSS score6.5 MEDIUM
EPSS probability0.68%
CISA KEVNot currently listed
Published2020-05-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check.

Weakness classification

  • nvd@nist.gov: CWE-862

Primary references