CVE-2020-6228: High severity SAP Business Client vulnerability
Published Apr 14, 2020
·Updated
SAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could be exploited by an attacker under certain conditions to modify the installer.
Affected Software
47 affected components
SAP Business Client=6.5
SAP Business Client=7.0
SAP Business Client=6.0
SAP Business Client=6.0-patch_level1
SAP Business Client=6.0-patch_level10
SAP Business Client=6.0-patch_level11
SAP Business Client=6.0-patch_level12
SAP Business Client=6.0-patch_level13
SAP Business Client=6.0-patch_level14
SAP Business Client=6.0-patch_level15
SAP Business Client=6.0-patch_level16
SAP Business Client=6.0-patch_level17
SAP Business Client=6.0-patch_level2
SAP Business Client=6.0-patch_level3
SAP Business Client=6.0-patch_level4
SAP Business Client=6.0-patch_level5
SAP Business Client=6.0-patch_level6
SAP Business Client=6.0-patch_level7
SAP Business Client=6.0-patch_level8
SAP Business Client=6.0-patch_level9
SAP Business Client=6.5
SAP Business Client=6.5-patch_level1
SAP Business Client=6.5-patch_level10
SAP Business Client=6.5-patch_level11
SAP Business Client=6.5-patch_level12
SAP Business Client=6.5-patch_level13
SAP Business Client=6.5-patch_level14
SAP Business Client=6.5-patch_level15
SAP Business Client=6.5-patch_level16
SAP Business Client=6.5-patch_level17
SAP Business Client=6.5-patch_level18
SAP Business Client=6.5-patch_level19
SAP Business Client=6.5-patch_level2
SAP Business Client=6.5-patch_level3
SAP Business Client=6.5-patch_level4
SAP Business Client=6.5-patch_level5
SAP Business Client=6.5-patch_level6
SAP Business Client=6.5-patch_level7
SAP Business Client=6.5-patch_level8
SAP Business Client=6.5-patch_level9
SAP Business Client=7.0
SAP Business Client=7.0-patch_level1
SAP Business Client=7.0-patch_level2
SAP Business Client=7.0-patch_level3
SAP Business Client=7.0-patch_level4
SAP Business Client=7.0-patch_level5
SAP Business Client=7.0-patch_level6
Event History
Apr 14, 2020
CVE Published
via MITRE·06:32 PM
Data Sourced
via MITRE·06:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-6228?
CVE-2020-6228 has been classified with a medium severity rating.
2
How do I fix CVE-2020-6228?
To fix CVE-2020-6228, ensure that you update SAP Business Client to the latest version that addresses this vulnerability.
3
What versions are affected by CVE-2020-6228?
CVE-2020-6228 affects SAP Business Client versions 6.5 and 7.0.
4
What type of vulnerability is CVE-2020-6228?
CVE-2020-6228 is an integrity check vulnerability that allows attackers to modify the installer.
5
Can CVE-2020-6228 be exploited remotely?
Yes, under certain conditions, CVE-2020-6228 can be exploited by an attacker to execute unauthorized modifications.