CVE-2020-6232

medium

Description

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media.

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202

https://launchpad.support.sap.com/#/notes/2888556

Details

Source: Mitre, NVD

Published: 2020-04-14

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N