CVE-2020-6232

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cna@sap.com

Published

2020-04-14

Last modified

2024-08-04

Weaknesses

CWE-862

Affected products

• Commerce Cloud (Sap)
• Sap Commerce (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2888556
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202