CVE-2020-6290

SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID

Medium · published July 14, 2020

CVSS v3.0
4.2
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID.

The record
Technical detail
CVSS v3.0
4.2 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00602 · 48.1th percentile
Published
2020-07-14T12:30Z
EPSS history
Timeline
  • 14 JUL 12:30Z
    SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID
    cvelistv5