Vulnerabilities > CVE-2020-6232 - Missing Authorization vulnerability in SAP Commerce Cloud 1811/1905
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |