CVE-2020-6197: Low severity SAP Enable Now vulnerability
SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow attackers with local access, for instance, to still download the portables.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2020-6197.
What is the title of this vulnerability?
The title of this vulnerability is 'SAP Enable Now before version 1908 does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow attackers with local access, for instance, to still download the portables.'
What is the severity of CVE-2020-6197?
The severity of CVE-2020-6197 is low, with a severity value of 3.3.
Which software versions are affected by CVE-2020-6197?
SAP Enable Now versions before 1908 are affected by CVE-2020-6197.
How can the vulnerability be exploited?
The vulnerability can be exploited by attackers with local access who can still download the portables.
Is there a fix available for CVE-2020-6197?
It is recommended to update to version 1908 or later of SAP Enable Now to fix CVE-2020-6197.