Vulnerability Details CVE-2020-6197
SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow attackers with local access, for instance, to still download the portables.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.3%
CVSS Severity
CVSS v3 Score 3.8
CVSS v2 Score 2.1
References
Products affected by CVE-2020-6197
-
cpe:2.3:a:sap:enable_now:-
-
cpe:2.3:a:sap:enable_now:10
-
cpe:2.3:a:sap:enable_now:1902