CVE-2020-6236

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admin_group privileges to change ownership and permissions (including S-user ID bit s-bit) of arbitrary files remotely. This results in the possibility to execute these files as root user from a non-root context, leading to Privilege Escalation.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sap:adaptive_extensions:1.0:*:*:*:*:*:*:*
cpe:2.3:a:sap:landscape_management:3.0:*:*:*:*:*:*:*

History

21 Nov 2024, 05:35

Type Values Removed Values Added
References () https://launchpad.support.sap.com/#/notes/2902456 - Permissions Required, Vendor Advisory () https://launchpad.support.sap.com/#/notes/2902456 - Permissions Required, Vendor Advisory
References () https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 - Vendor Advisory () https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202 - Vendor Advisory

Information

Published : 2020-04-14 19:15

Updated : 2024-11-21 05:35


NVD link : CVE-2020-6236

Mitre link : CVE-2020-6236

CVE.ORG link : CVE-2020-6236


JSON object : View

Products Affected

sap

  • landscape_management
  • adaptive_extensions
CWE
CWE-269

Improper Privilege Management