CVE-2020-6310

Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.

Link	Resource
https://launchpad.support.sap.com/#/notes/2944988	Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345	Vendor Advisory

Configuration 1

cpe:2.3:a:sap:abap_platform:7.50:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:7.40:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:7.31:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:700:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:701:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:702:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:710:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:711:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:751:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:753:*:*:*:*:*:*:* cpe:2.3:a:sap:abap_platform:755:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:710:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:711:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:* cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*

---

Published : 2020-08-12 02:15

Updated : 2022-10-05 02:16

---

NVD link : CVE-2020-6310

Mitre link : CVE-2020-6310

Abap Platform

Sap

NVD-CWE-noinfo