CVE-2020-6236: High severity sap adaptive extensions vulnerability
SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admingroup privileges to change ownership and permissions (including S-user ID bit s-bit) of arbitrary files remotely. This results in the possibility to execute these files as root user from a non-root context, leading to Privilege Escalation.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-6236?
CVE-2020-6236 is a vulnerability in SAP Landscape Management version 3.0 and SAP Adaptive Extensions version 1.0 that allows an attacker with admin_group privileges to remotely change ownership and permissions of arbitrary files, potentially enabling the execution of these files as the root user.
What is the severity of CVE-2020-6236?
The severity of CVE-2020-6236 is high, with a CVSS score of 7.2.
What software versions are affected by CVE-2020-6236?
SAP Landscape Management version 3.0 and SAP Adaptive Extensions version 1.0 are affected by CVE-2020-6236.
How can an attacker exploit CVE-2020-6236?
An attacker with admin_group privileges can exploit CVE-2020-6236 by remotely changing ownership and permissions of arbitrary files, potentially enabling the execution of these files as the root user.
Are there any references for CVE-2020-6236?
Yes, you can find references for CVE-2020-6236 at the following links: [Reference 1](https://launchpad.support.sap.com/#/notes/2902456) and [Reference 2](https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202).