medium4.3
CVE-2020-6310
Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any a…
Impact
Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Abap Platform | Versions 7.31, 7.40, 7.50, 700, 701, 702 |
| Sap | Netweaver Application Server Abap | Versions 700, 701, 702, 710, 711, 731 |