Vulnerabilities > CVE-2020-6197 - Insufficient Session Expiration vulnerability in SAP Enable NOW 10/1902
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow attackers with local access, for instance, to still download the portables.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |