CoreCVE
Back

MEDIUM

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal

Published Jul 14, 2020

Description

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner sap
Published Jul 14, 2020
Updated Aug 4, 2024
Reserved Jan 8, 2020
Link CVE-2020-6286
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-6286
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-6286
ENISA EUVD
Assigner sap
Published Jul 14, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-27436
EUVD-2020-27436