{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2020-26836/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2020-26836/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2020-26836/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2020-26836/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2020-26836/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2020-26836"},"sightings":{"href":"/api/v1/sightings/cve-2020-26836"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2020/CVE-2020-26836.yaml","nuclei_template_severity":"medium","nuclei_template_yaml":"id: CVE-2020-26836\n\ninfo:\n  name: SAP Solution Manager - Open Redirect\n  author: Gal Nagli,LRVT\n  severity: medium\n  description: SAP Solution Manager contains an open redirect vulnerability via the logoff endpoint. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.\n  impact: |\n    Attackers can redirect users to malicious websites through crafted links, potentially facilitating phishing attacks or credential theft.\n  remediation: |\n    Apply security patches or updates provided by SAP to fix the vulnerability.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2020-26836\n    - https://onapsis.com/security-advisories/sap-solution-manager-open-redirect-trace-analysis/\n    - http://packetstormsecurity.com/files/163136/SAP-Solution-Manager-7.2-ST-720-Open-Redirection.html\n    - http://seclists.org/fulldisclosure/2021/Jun/25\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n    cvss-score: 6.1\n    cve-id: CVE-2020-26836\n    cwe-id: CWE-601\n    epss-score: 0.022\n    epss-percentile: 0.82579\n    cpe: cpe:2.3:a:sap:solution_manager:7.20:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: sap\n    product: solution_manager\n  tags: cve,cve2020,redirect,sap,vuln,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/sap/public/bc/icf/logoff?redirecturl=https://interact.sh\"\n\n    matchers-condition: and\n    matchers:\n      - type: status\n        status:\n          - 302\n          - 301\n          - 307\n\n      - type: word\n        part: header\n        words:\n          - \"Location: https://www.interact.sh\"\n          - \"Location: https://interact.sh\"\n        condition: or\n# digest: 4a0a00473045022100c1c8703aae0df2a707619b2049db904bfa695ad29261e67bcc355781abafbcbd0220323554930895549b9c3d29b1f19b4fd47793b45735fd91f0d31929deb114e2ce:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2020-26836"}