CVE-2020-6181: Medium severity SAP ABAP Platform vulnerability
Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAPBASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAPBASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-6181.
What is the severity of CVE-2020-6181?
The severity of CVE-2020-6181 is medium, with a CVSS score of 5.8.
Which versions of SAP NetWeaver and SAP ABAP Platform are affected?
SAP NetWeaver versions 7.02, 7.30, 7.31, 7.40, and SAP ABAP Platform versions 7.50, 7.51, 7.52, 7.53, 7.54 are affected.
What is the issue with the SAML SSO implementation in SAP NetWeaver and SAP ABAP Platform?
Under certain circumstances, the SAML SSO implementation in SAP NetWeaver and SAP ABAP Platform allows an attacker to include invalidated data in the HTTP response header, leading to HTTP response manipulation.
How can I fix the vulnerability CVE-2020-6181?
To fix the vulnerability CVE-2020-6181, it is recommended to apply the relevant SAP Security Note and update your SAP NetWeaver and SAP ABAP Platform installations to the latest available patch levels.