VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 12, 2020· Updated Aug 4, 2024

CVE-2020-6181

CVE-2020-6181

Description

Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SAP ABAP Platform (SAP_BASIS versions 750, 751, 752, 753, 754), allows an attacker to include invalidated data in the HTTP response header sent to a Web user, leading to HTTP Response Splitting vulnerability.

Affected products

4
  • SAP/ABAP Platformllm-fuzzy
    Range: 750, 751, 752, 753, 754
  • SAP/Netweaverllm-fuzzy
    Range: 702, 730, 731, 740
  • SAP SE/SAP ABAP Platform (SAP Basis)v5
    Range: = 7.50
  • SAP SE/SAP NetWeaver (SAP Basis)v5
    Range: = 7.02

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.