CVE-2020-6232

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check

Medium · published April 14, 2020

CVSS v3.0
5.3
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00832 · 57.2th percentile
Published
2020-04-14T18:37Z
EPSS history
Timeline
  • 14 APR 18:37Z
    SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check
    cvelistv5