SAP NetWeaver AS ABAP (Web Dynpro), versions – 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26818
Reference (s):
- https://launchpad.support.sap.com/#/notes/2971954
- URL: https://launchpad.support.sap.com/#/notes/2971954
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571
- URL: https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571