CVE-2020-26820: Malicious File Upload
First published: Tue Nov 10 2020(Updated: )
SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, to expose unauthenticated access to the file system and upload a malicious file. The attacker or another user can then use a separate mechanism to execute OS commands through the uploaded file leading to Privilege Escalation and completely compromise the confidentiality, integrity and availability of the server operating system and any application running on it.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver Application Server Java | =7.20 | |
| SAP NetWeaver Application Server Java | =7.30 | |
| SAP NetWeaver Application Server Java | =7.31 | |
| SAP NetWeaver Application Server Java | =7.40 | |
| SAP NetWeaver Application Server Java | =7.50 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-26820?
CVE-2020-26820 is a vulnerability in SAP NetWeaver AS JAVA versions 7.20, 7.30, 7.31, 7.40, and 7.50 that allows an attacker with administrator privileges to expose unauthenticated access to the file system and upload a malicious file.
How severe is CVE-2020-26820?
CVE-2020-26820 is categorized as critical with a severity score of 7.2.
Which software versions are affected by CVE-2020-26820?
SAP NetWeaver AS JAVA versions 7.20, 7.30, 7.31, 7.40, and 7.50 are affected by CVE-2020-26820.
How can an attacker exploit CVE-2020-26820?
An attacker with administrator privileges can exploit CVE-2020-26820 by using the administrator console to expose unauthenticated access to the file system and upload a malicious file.
Are there any references for CVE-2020-26820?
Yes, you can find more information about CVE-2020-26820 at the following references: [Packet Storm Security](http://packetstormsecurity.com/files/162086/SAP-Java-OS-Remote-Code-Execution.html), [Full Disclosure Mailing List](http://seclists.org/fulldisclosure/2021/Apr/7), and [SAP Note](https://launchpad.support.sap.com/#/notes/2979062).
- collector/nvd-index
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap netweaver application server java
- version/sap netweaver application server java/7.20
- version/sap netweaver application server java/7.30
- version/sap netweaver application server java/7.31
- version/sap netweaver application server java/7.40
- version/sap netweaver application server java/7.50