CVE-2020-26818
First published: Tue Nov 10 2020(Updated: )
SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver AS ABAP | =731 | |
| SAP NetWeaver AS ABAP | =740 | |
| SAP NetWeaver AS ABAP | =750 | |
| SAP NetWeaver AS ABAP | =751 | |
| SAP NetWeaver AS ABAP | =752 | |
| SAP NetWeaver AS ABAP | =753 | |
| SAP NetWeaver AS ABAP | =754 | |
| SAP NetWeaver AS ABAP | =755 | |
| SAP NetWeaver AS ABAP | =782 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-26818?
CVE-2020-26818 has a medium severity rating due to the potential for exposing sensitive system information.
How do I fix CVE-2020-26818?
To fix CVE-2020-26818, apply the security patches provided by SAP for the affected NetWeaver AS ABAP versions.
What systems are affected by CVE-2020-26818?
CVE-2020-26818 affects SAP NetWeaver AS ABAP versions 731, 740, 750, 751, 752, 753, 754, 755, and 782.
What type of vulnerability is CVE-2020-26818?
CVE-2020-26818 is an authorization vulnerability that allows authenticated users to access Web Dynpro components.
What are the potential impacts of CVE-2020-26818?
The potential impacts of CVE-2020-26818 include unauthorized access to sensitive system information restricted to highly privileged users.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap netweaver as abap
- version/sap netweaver as abap/731
- version/sap netweaver as abap/740
- version/sap netweaver as abap/750
- version/sap netweaver as abap/751
- version/sap netweaver as abap/752
- version/sap netweaver as abap/753
- version/sap netweaver as abap/754
- version/sap netweaver as abap/755
- version/sap netweaver as abap/782