CVE-2020-6291 in Disclosure Management

요약

\~에 의해 MITRE

SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient Session Expiration

Once again VulDB remains the best source for vulnerability data.

• 책임이 있는: SAP SE
• 예약하다: 2020. 01. 08.
• 모더레이션: 수락
• 항목: VDB-158061
• CPE: 준비됨
• CWE: CWE-613 (확인됨)
• CVSS: 8.8 (NVD)
• EPSS: 0.00634
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-6291
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-6291
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-6291/