CVE-2020-6286
MEDIUM EXPLOITEDSAP NetWeaver AS JAVA <7.50 - Path Traversal
Title source: llmExploitation Summary
CVE-2020-6286 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including murataydemir.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2020-6286, demonstrating a directory traversal vulnerability in SAP NetWeaver AS JAVA (LM Configuration Wizard). The exploit leverages insufficient input validation in the `sessionID` parameter of a SOAP request to traverse directories and download arbitrary files.
Description
The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal.
Exploits (2)
This repository contains a functional proof-of-concept exploit for CVE-2020-6286, demonstrating a directory traversal vulnerability in SAP NetWeaver AS JAVA (LM Configuration Wizard). The exploit leverages insufficient input validation in the `sessionID` parameter of a SOAP request to traverse directories and download arbitrary files.
This repository contains a functional exploit PoC for CVE-2020-6286 and CVE-2020-6287, targeting SAP NetWeaver AS Java. It includes detection for missing authorization checks and exploits directory traversal to download ZIP files, as well as user creation with varying privileges.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N