Security Advisory

CVE-2020-6178

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-03-10 20:17:39

Last updated 2024-08-04 08:55:22

Assigner sap

CVSS score 5.4

State PUBLISHED

Description

SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser history or log files, leading to Information Disclosure.

← Browse all CVEs View on cve.org ↗