CVE-2020-6197

SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner

Low · published March 10, 2020

CVSS v3.0
3.8
EPSS
1%
Percentile
46.1
In the wild
Unconfirmed
What it is

SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow attackers with local access, for instance, to still download the portables.

The record
Technical detail
CVSS v3.0
3.8 · LOW
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00564 · 46.1th percentile
Published
2020-03-10T20:17Z
EPSS history
Timeline
  • 10 MAR 20:17Z
    SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner
    cvelistv5