CVE-2020-6207 - SAP Solution Manager Missing Authentication for Critical Function Vulnerability
Project:SAP
Product:Solution Manager
Date Added:2021-11-03Due Date:2022-05-03
Vulnerability Name
SAP Solution Manager Missing Authentication for Critical Function Vulnerability
Description
SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in complete compromise of all SMDAgents connected to the Solution Manager.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply updates per vendor instructions.
Additional Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-6207