What’s Vulnerable › Vulnerabilities

CVE-2020-6236

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-14 · updated 2026-06-17
• Weakness: CWE-269

Description

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admin_group privileges to change ownership and permissions (including S-user ID bit s-bit) of arbitrary files remotely. This results in the possibility to execute these files as root user from a non-root context, leading to Privilege Escalation.

Affected products

• SAP Adaptive Extensions: 1.0
• SAP SE SAP Landscape Management: 3.0

References

• https://launchpad.support.sap.com/#/notes/2902456
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
• https://launchpad.support.sap.com/#/notes/2902456
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202

Get alerted when CVE-2020-6236 or the next vulnerability affects your stack