Medium severity · published Dec 9, 2020
CVE-2020-26828
SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type
6.4
CVSS
0.8%
EPSS
No
On KEV
Description
SAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload and download content of specific file type. In some file types it is possible to enter formulas which can call external applications or execute scripts. The execution of a payload (script) on target machine could be used to steal and modify the data available in the spreadsheet
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DM
Disclosure Management · Sap
10.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-26828
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-26828
Permissions Required
https://launchpad.support.sap.com/#/notes/2971180
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564757079
More from Disclosure Management
9.8
CVE-2018-2404
SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation
8.8
CVE-2020-6292
Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration
8.8
CVE-2020-6291
SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient…
8.8
CVE-2020-6289
SAP Disclosure Management, version 10.1, had insufficient protection against Cross-Site Request Forgery, which could be used to trick user in to browsing malicious site
8.8
CVE-2019-0258
SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges