SAP NetWeaver Missing Authentication for Critical Function Vulnerability
CVSS score
—
EPSS probability
%94.7
Risk score
—
Published
5 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability) (★198)
PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original Metasploit PR module: https://github.com/rapid7/metasploit-framework/pull/13852/commits/d1e2c75b3eafa7f62a6aba9fbe6220c8da97baa8 This PoC only create user with unauthentication permission and no more administrator permission set. This project is created only for educational purposes and cannot be used for law violation or personal gain. The author of this project is (★94)
[CVE-2020-6287] SAP NetWeaver AS JAVA (LM Configuration Wizard) Authentication Bypass (Create Simple & Administrator Java User) (★12)
sap netweaver portal add user administrator (★0)
Checker help to verify created account or find it's mandat (★0)
Automated Exploit for CVE-2020-6287 (★0)
Nuclei: SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition
Similar Vulnerabilities
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-6287"