Vulnerability Description
SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation.
CVSS Score
7.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Host Agent | 7.21 |
References
- http://packetstormsecurity.com/files/162084/SAP-Host-Control-Local-Privilege-EscThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2021/Apr/5Mailing ListThird Party Advisory
- https://launchpad.support.sap.com/#/notes/2902645Permissions RequiredVendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202Vendor Advisory
- http://packetstormsecurity.com/files/162084/SAP-Host-Control-Local-Privilege-EscThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2021/Apr/5Mailing ListThird Party Advisory
- https://launchpad.support.sap.com/#/notes/2902645Permissions RequiredVendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202Vendor Advisory
FAQ
What is CVE-2020-6234?
CVE-2020-6234 is a vulnerability with a CVSS score of 7.2 (HIGH). SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation.
How severe is CVE-2020-6234?
CVE-2020-6234 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-6234?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Host Agent.