CVE-2020-6317

Severity: low (CVSS 3.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-11-30 · updated 2026-06-17
Weakness: CWE-532

Description

In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installation can access sensitive information which appears in the installation log files. This information although sensitive is of limited utility and cannot be used to further access, modify or render unavailable any other information in the cockpit or system. This affects SAP Adaptive Server Enterprise, Versions - 15.7, 16.0.

Affected products

SAP SE SAP Adaptive Server Enterprise: 15.7, 16.0

References

https://launchpad.support.sap.com/#/notes/2953203
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700
https://launchpad.support.sap.com/#/notes/2953203
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700

Get alerted when CVE-2020-6317 or the next vulnerability affects your stack