Skip links
RedRays
Published in: sap note

CVE-2020-6191 Missing Input Validation in SAP Landscape Management, SAP security note 2878030

Author
Published on:

Description

An attacker with admin privileges could run malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to missing input validation.

Available fix and Supported packages

  • VCM | 3.00 | 3.00
  • SAPACEXT | 1.00 | 1.00
  • SAPACEXT | 1.00EXT | 1.00EXT
  • SAP ADAPTIVE EXTENSION 1.0 EXT | SP000 | 000051
  • SAP ADAPTIVE EXTENSIONS 1.0 | SP000 | 000051
  • VCM LVM 3.0 | SP013 | 000003

Affected component

    BC-VCM-LVM
    Landscape Virtualization Management

CVSS

Score: 7.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/2878030

TAGS

#LaMa
#Landscape-Management
#Host-Agent
#operations.d
#SAPACEXT
#SAP-Adaptive-Extensions
#&160-SAPACOSPrep
#&160-CVE-2020-6191

You may also like