CVE-2020-6236

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admin_group privileges to change ownership and permissions (including S-user ID bit s-bit) of arbitrary files remotely. This results in the possibility to execute these files as root user from a non-root context, leading to Privilege Escalation.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sap:adaptive_extensions:1.0:*:*:*:*:*:*:*
cpe:2.3:a:sap:landscape_management:3.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-04-14 19:15

Updated : 2024-02-28 17:47


NVD link : CVE-2020-6236

Mitre link : CVE-2020-6236

CVE.ORG link : CVE-2020-6236


JSON object : View

Products Affected

sap

  • adaptive_extensions
  • landscape_management
CWE
CWE-269

Improper Privilege Management