← All advisories

Medium severity5.4NVD Advisory· Published Jul 14, 2020· Updated Jun 17, 2026

CVE-2020-6267

CVE-2020-6267

Description

Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only flag.

Affected products

3

SAP SE/SAP Disclosure Managementv5
Range: < 10.1
SAP/Disclosure Management2 versions
cpe:2.3:a:sap:disclosure_management:10.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:disclosure_management:10.1:*:*:*:*:*:*:*
- (no CPE)range: 10.1

Patches

Vulnerability mechanics

References

2

launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
wiki.scn.sap.com/wiki/pages/viewpage.actionnvdBroken LinkVendor Advisory

News mentions

0

No linked articles in our index yet.