CVE-2020-6307
MEDIUMSAP Basis - Incorrect Authorization in Automated Note Search Tool
Title source: llmDescription
Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533671771
Permissions Required x_refsource_misc
https://launchpad.support.sap.com/#/notes/2863397
Scores
CVSS v3
4.3
EPSS
0.0024
EPSS Percentile
46.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-863
Status
published
Products (10)
sap/basis
7.0
sap/basis
7.01
sap/basis
7.02
sap/basis
7.31
sap/basis
7.40
sap/basis
7.50
sap/basis
7.51
sap/basis
7.52
sap/basis
7.53
sap/basis
7.54
Published
Jan 14, 2020
Tracked Since
Feb 18, 2026