Medium severity4.4NVD Advisory· Published Jun 10, 2020· Updated Jun 17, 2026
CVE-2020-6239
CVE-2020-6239
Description
Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permissions to view SYSTEM user password in clear text, leading to Information Disclosure.
Affected products
4- SAP SE/SAP Business One (Backup service)v5Range: < 9.3
cpe:2.3:a:sap:business_one:9.3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sap:business_one:9.3:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_one:10.0:*:*:*:*:*:*:*
- (no CPE)range: 9.3, 10.0
Patches
Vulnerability mechanics
References
2- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.