CVE-2020-26809
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2020
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission checks via the '/medias' endpoint hence gaining access to Secure Media folders. This folder could contain sensitive files that results in disclosure of sensitive information and impact system configuration confidentiality.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP Commerce Cloud
- Vendor
- SAP SE
- Product
- SAP Commerce Cloud
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| < 1808 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 1811 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 1905 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 2005 | affected | Unavailable | Unavailable | Unavailable | None listed |