Lucene search

[email protected]CVE-2020-6225

HistoryApr 14, 2020 - 8:15 p.m.

CVE-2020-6225

2020-04-1420:15:15

CWE-22

[email protected]

web.nvd.nist.gov

cve-2020-6225

sap

netweaver

knowledge management

kmc-cm

kmc-wpc

path traversal

security vulnerability

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

JSON

SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through to the file APIs, allowing the attacker to overwrite, delete, or corrupt arbitrary files on the remote server, leading to Path Traversal.

Affected configurations

NVD

Node

sapnetweaver_knowledge_management_and_collaboration_\(kmc-cm\)Match7.00

sapnetweaver_knowledge_management_and_collaboration_\(kmc-cm\)Match7.01

sapnetweaver_knowledge_management_and_collaboration_\(kmc-cm\)Match7.02

sapnetweaver_knowledge_management_and_collaboration_\(kmc-cm\)Match7.30

sapnetweaver_knowledge_management_and_collaboration_\(kmc-cm\)Match7.31

sapnetweaver_knowledge_management_and_collaboration_\(kmc-cm\)Match7.40

sapnetweaver_knowledge_management_and_collaboration_\(kmc-cm\)Match7.50

sapnetweaver_knowledge_management_and_collaboration_\(kmc-wpc\)Match7.30

sapnetweaver_knowledge_management_and_collaboration_\(kmc-wpc\)Match7.31

sapnetweaver_knowledge_management_and_collaboration_\(kmc-wpc\)Match7.40

sapnetweaver_knowledge_management_and_collaboration_\(kmc-wpc\)Match7.50

CPENameOperatorVersion
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)sap netweaver knowledge management and collaboration (kmc-cm)eq7.00
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)sap netweaver knowledge management and collaboration (kmc-cm)eq7.01
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)sap netweaver knowledge management and collaboration (kmc-cm)eq7.02
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)sap netweaver knowledge management and collaboration (kmc-cm)eq7.30
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)sap netweaver knowledge management and collaboration (kmc-cm)eq7.31
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)sap netweaver knowledge management and collaboration (kmc-cm)eq7.40
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)sap netweaver knowledge management and collaboration (kmc-cm)eq7.50
sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\)sap netweaver knowledge management and collaboration (kmc-wpc)eq7.30
sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\)sap netweaver knowledge management and collaboration (kmc-wpc)eq7.31
sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\)sap netweaver knowledge management and collaboration (kmc-wpc)eq7.40

CPE	Name	Operator	Version
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)	sap netweaver knowledge management and collaboration (kmc-cm)	eq	7.00
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)	sap netweaver knowledge management and collaboration (kmc-cm)	eq	7.01
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)	sap netweaver knowledge management and collaboration (kmc-cm)	eq	7.02
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)	sap netweaver knowledge management and collaboration (kmc-cm)	eq	7.30
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)	sap netweaver knowledge management and collaboration (kmc-cm)	eq	7.31
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)	sap netweaver knowledge management and collaboration (kmc-cm)	eq	7.40
sap:netweaver_knowledge_management_and_collaboration_\(kmc-cm\)	sap netweaver knowledge management and collaboration (kmc-cm)	eq	7.50
sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\)	sap netweaver knowledge management and collaboration (kmc-wpc)	eq	7.30
sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\)	sap netweaver knowledge management and collaboration (kmc-wpc)	eq	7.31
sap:netweaver_knowledge_management_and_collaboration_\(kmc-wpc\)	sap netweaver knowledge management and collaboration (kmc-wpc)	eq	7.40

Rows per page:

1-10 of 111

CNA Affected

[
  {
    "product": "SAP NetWeaver (Knowledge Management) (KMC-CM)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 7.00"
      },
      {
        "status": "affected",
        "version": "< 7.01"
      },
      {
        "status": "affected",
        "version": "< 7.02"
      },
      {
        "status": "affected",
        "version": "< 7.30"
      },
      {
        "status": "affected",
        "version": "< 7.31"
      },
      {
        "status": "affected",
        "version": "< 7.40"
      },
      {
        "status": "affected",
        "version": "< 7.50"
      }
    ]
  },
  {
    "product": "SAP NetWeaver (Knowledge Management) (KMC-WPC)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 7.30"
      },
      {
        "status": "affected",
        "version": "< 7.31"
      },
      {
        "status": "affected",
        "version": "< 7.40"
      },
      {
        "status": "affected",
        "version": "< 7.50"
      }
    ]
  }
]

References

launchpad.support.sap.com/#/notes/2896682

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

JSON

Related for CVE-2020-6225

cvelist1 prion1 nvd1