CVE-2020-6234

 

Published at: - 14-04-2020 09:15

Last modified: - 29-04-2022 03:24

Total changes: - 4

Description

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://launchpad.support.sap.com/#/notes/2902645
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
• 20210405 Onapsis Security Advisory 2021-0002: [CVE-2020-6234] - SAP Multiple root LPE through SAP Host Control-Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/162084/SAP-Host-Control-Local-Privilege-Escalation.html

 

Keywords

NVD

 

CVE-2020-6234

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures