NetSight
high8.8

CVE-2020-6291

SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leadi…

Impact

SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient Session Expiration

Affected products

VendorProductAffected versions
SapDisclosure Management
Version 10.1

Weakness classification

References