cnvd - cnvd-2020-70951

cnvd-2020-70951

Vulnerability from cnvd

Title: SAP Solution Manager授权问题漏洞（CNVD-2020-70951）

Description:

SAP Solution Manager是德国思爱普（SAP）公司的一套集系统监控、SAP支持桌面、自助服务、ASAP实施等多个功能为一体的系统管理平台。该平台可以帮助客户建立SAP解决方案的生命周期管理，并提供系统监控、远程支持服务和SAP产品组件升级等功能。

SAP Solution Manager 7.2版本存在授权问题漏洞，该漏洞源于未能对经过身份验证的用户执行必要的授权检查。由于不适当的访问控制，被认证为合格用户的网络攻击者可以使用应该限制为管理员的操作。目前没有详细的漏洞细节提供。

Severity: 中

Patch Name: SAP Solution Manager授权问题漏洞（CNVD-2020-70951）的补丁

Patch Description:

SAP Solution Manager 7.2版本存在授权问题漏洞，该漏洞源于未能对经过身份验证的用户执行必要的授权检查。由于不适当的访问控制，被认证为合格用户的网络攻击者可以使用应该限制为管理员的操作。目前没有详细的漏洞细节提供。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079

Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-26830

Impacted products

Name
SAP SAP Solution Manager 7.20

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-26830",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-26830"
    }
  },
  "description": "SAP Solution Manager\u662f\u5fb7\u56fd\u601d\u7231\u666e\uff08SAP\uff09\u516c\u53f8\u7684\u4e00\u5957\u96c6\u7cfb\u7edf\u76d1\u63a7\u3001SAP\u652f\u6301\u684c\u9762\u3001\u81ea\u52a9\u670d\u52a1\u3001ASAP\u5b9e\u65bd\u7b49\u591a\u4e2a\u529f\u80fd\u4e3a\u4e00\u4f53\u7684\u7cfb\u7edf\u7ba1\u7406\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u53ef\u4ee5\u5e2e\u52a9\u5ba2\u6237\u5efa\u7acbSAP\u89e3\u51b3\u65b9\u6848\u7684\u751f\u547d\u5468\u671f\u7ba1\u7406\uff0c\u5e76\u63d0\u4f9b\u7cfb\u7edf\u76d1\u63a7\u3001\u8fdc\u7a0b\u652f\u6301\u670d\u52a1\u548cSAP\u4ea7\u54c1\u7ec4\u4ef6\u5347\u7ea7\u7b49\u529f\u80fd\u3002\n\nSAP Solution Manager 7.2\u7248\u672c\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u672a\u80fd\u5bf9\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u6267\u884c\u5fc5\u8981\u7684\u6388\u6743\u68c0\u67e5\u3002\u7531\u4e8e\u4e0d\u9002\u5f53\u7684\u8bbf\u95ee\u63a7\u5236\uff0c\u88ab\u8ba4\u8bc1\u4e3a\u5408\u683c\u7528\u6237\u7684\u7f51\u7edc\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u5e94\u8be5\u9650\u5236\u4e3a\u7ba1\u7406\u5458\u7684\u64cd\u4f5c\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-70951",
  "openTime": "2020-12-13",
  "patchDescription": "SAP Solution Manager\u662f\u5fb7\u56fd\u601d\u7231\u666e\uff08SAP\uff09\u516c\u53f8\u7684\u4e00\u5957\u96c6\u7cfb\u7edf\u76d1\u63a7\u3001SAP\u652f\u6301\u684c\u9762\u3001\u81ea\u52a9\u670d\u52a1\u3001ASAP\u5b9e\u65bd\u7b49\u591a\u4e2a\u529f\u80fd\u4e3a\u4e00\u4f53\u7684\u7cfb\u7edf\u7ba1\u7406\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u53ef\u4ee5\u5e2e\u52a9\u5ba2\u6237\u5efa\u7acbSAP\u89e3\u51b3\u65b9\u6848\u7684\u751f\u547d\u5468\u671f\u7ba1\u7406\uff0c\u5e76\u63d0\u4f9b\u7cfb\u7edf\u76d1\u63a7\u3001\u8fdc\u7a0b\u652f\u6301\u670d\u52a1\u548cSAP\u4ea7\u54c1\u7ec4\u4ef6\u5347\u7ea7\u7b49\u529f\u80fd\u3002\r\n\r\nSAP Solution Manager 7.2\u7248\u672c\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u672a\u80fd\u5bf9\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u6267\u884c\u5fc5\u8981\u7684\u6388\u6743\u68c0\u67e5\u3002\u7531\u4e8e\u4e0d\u9002\u5f53\u7684\u8bbf\u95ee\u63a7\u5236\uff0c\u88ab\u8ba4\u8bc1\u4e3a\u5408\u683c\u7528\u6237\u7684\u7f51\u7edc\u653b\u51fb\u8005\u53ef\u4ee5\u4f7f\u7528\u5e94\u8be5\u9650\u5236\u4e3a\u7ba1\u7406\u5458\u7684\u64cd\u4f5c\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "SAP Solution Manager\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff08CNVD-2020-70951\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "SAP SAP Solution Manager 7.20"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-26830",
  "serverity": "\u4e2d",
  "submitTime": "2020-12-11",
  "title": "SAP Solution Manager\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff08CNVD-2020-70951\uff09"
}

CVE-2020-26830 (GCVE-0-2020-26830)

Vulnerability from cvelistv5

Published

2020-12-09 16:29

Modified

2024-08-04 16:03

Severity ?

7.6 (High) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

CWE

Missing Authorization

Summary

SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary authorization checks for an authenticated user. Due to inadequate access control, a network attacker authenticated as a regular user can use operations which should be restricted to administrators. These operations can be used to Change the User Experience Monitoring configuration, obtain details about the configured SAP Solution Manager agents, Deploy a malicious User Experience Monitoring script.

References

▼	URL	Tags
	https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079	x_refsource_MISC
	https://launchpad.support.sap.com/#/notes/2983204	x_refsource_MISC
	http://seclists.org/fulldisclosure/2021/Jun/29	mailing-list, x_refsource_FULLDISC
	http://packetstormsecurity.com/files/163161/SAP-Solution-Manager-7.2-Missing-Authorization.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	SAP SE	SAP Solution Manager (User Experience Monitoring)	Version: < 7.20

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T16:03:22.653Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://launchpad.support.sap.com/#/notes/2983204"
          },
          {
            "name": "20210614 Onapsis Security Advisory 2021-0011 Missing authorization check in SolMan End-User Experience Monitoring",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Jun/29"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/163161/SAP-Solution-Manager-7.2-Missing-Authorization.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SAP Solution Manager (User Experience Monitoring)",
          "vendor": "SAP SE",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 7.20"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary authorization checks for an authenticated user. Due to inadequate access control, a network attacker authenticated as a regular user can use operations which should be restricted to administrators. These operations can be used to Change the User Experience Monitoring configuration, obtain details about the configured SAP Solution Manager agents, Deploy a malicious User Experience Monitoring script."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Missing Authorization",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-15T20:06:17",
        "orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
        "shortName": "sap"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://launchpad.support.sap.com/#/notes/2983204"
        },
        {
          "name": "20210614 Onapsis Security Advisory 2021-0011 Missing authorization check in SolMan End-User Experience Monitoring",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Jun/29"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/163161/SAP-Solution-Manager-7.2-Missing-Authorization.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cna@sap.com",
          "ID": "CVE-2020-26830",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SAP Solution Manager (User Experience Monitoring)",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "\u003c",
                            "version_value": "7.20"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "SAP SE"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary authorization checks for an authenticated user. Due to inadequate access control, a network attacker authenticated as a regular user can use operations which should be restricted to administrators. These operations can be used to Change the User Experience Monitoring configuration, obtain details about the configured SAP Solution Manager agents, Deploy a malicious User Experience Monitoring script."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": "7.6",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Missing Authorization"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079",
              "refsource": "MISC",
              "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079"
            },
            {
              "name": "https://launchpad.support.sap.com/#/notes/2983204",
              "refsource": "MISC",
              "url": "https://launchpad.support.sap.com/#/notes/2983204"
            },
            {
              "name": "20210614 Onapsis Security Advisory 2021-0011 Missing authorization check in SolMan End-User Experience Monitoring",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Jun/29"
            },
            {
              "name": "http://packetstormsecurity.com/files/163161/SAP-Solution-Manager-7.2-Missing-Authorization.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/163161/SAP-Solution-Manager-7.2-Missing-Authorization.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
    "assignerShortName": "sap",
    "cveId": "CVE-2020-26830",
    "datePublished": "2020-12-09T16:29:34",
    "dateReserved": "2020-10-07T00:00:00",
    "dateUpdated": "2024-08-04T16:03:22.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted