CVE-2020-6364 Command injection in SAP Solution Manager (CA Introscope Enterprise Manager) and SAP Focused Run (CA Introscope Enterprise Manager)
Attackers can execute OS commands via modified cookies in SAP Solution Manager, gaining host control and impacting availability.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-6364?
CVE-2020-6364 is a critical command injection vulnerability in SAP Solution Manager (CA Introscope Enterprise Manager) and SAP Focused Run (CA Introscope Enterprise Manager), published on 15 Oct 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection. With this, the attacker is able to read and modify all system files and also impact system availability.
Weakness: CWE-78
Which versions are affected by CVE-2020-6364?
It affects 1 product.
Products include Sap Introscope Enterprise Manager.
How do I fix CVE-2020-6364?
No fix has been published for CVE-2020-6364 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2020-6364 being exploited?
There is no known exploitation of CVE-2020-6364 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in SAP Solution Manager (CA Introscope Enterprise Manager) and SAP Focused Run (CA Introscope Enterprise Manager)
Sources
Also known as GHSA-w6w2-xxmc-3cmj.