CVE-2020-6291

SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once…

Medium · published July 14, 2020

CVSS v3.0
5.4
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient Session Expiration

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.7th percentile
Published
2020-07-14T12:30Z
EPSS history
Timeline
  • 14 JUL 12:30Z
    SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once…
    cvelistv5