VULNERABILITY INTELLIGENCE

CVE-2020-6295

CVSS score7.8 HIGH
EPSS probability0.27%
CISA KEVNot currently listed
Published2020-08-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encrypted sensitive and confidential information through publicly readable installation log files leading to a compromise of the installed Cockpit. This compromise could enable the attacker to view, modify and/or make unavailable any data associated with the Cockpit, leading to Information Disclosure.

Weakness classification

  • CWE-532: Insertion of Sensitive Information into Log File
  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references