CVE-2020-6232: Medium severity sap commerce vulnerability
Published Apr 14, 2020
·Updated
SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media.
Affected Software
2 affected components
SAP Commerce Cloud=1811
SAP Commerce Cloud=1905
Event History
Apr 14, 2020
CVE Published
via MITRE·06:37 PM
Data Sourced
via MITRE·06:37 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-6232.
2
What software versions are affected by this vulnerability?
SAP Commerce versions 1811 and 1905 are affected by this vulnerability.
3
What is the severity rating for this vulnerability?
The severity rating for this vulnerability is medium with a score of 5.3.
4
What is the impact of this vulnerability?
This vulnerability affects the confidentiality of secure media.
5
How can I fix this vulnerability?
To fix this vulnerability, apply the necessary authorization checks for anonymous users.