CVE-2020-6207 — SAP Solution Manager Missing Authentication for Critical Function Vulnerability

provenance: imported · CVE: CVE-2020-6207

CVE-2020-6207: SAP Solution Manager Missing Authentication for Critical Function Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	SAP
Product	Solution Manager
Date added	2021-11-03
Due date	2022-05-03
Ransomware campaign use	Unknown

Description

SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in complete compromise of all SMDAgents connected to the Solution Manager.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-6207

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-6207
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog