low3.3
CVE-2020-6197
SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner.
Impact
SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow attackers with local access, for instance, to still download the portables.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Enable Now | before 1908 |