CVE-2020-6371: 
SAP NetWeaver Application Server ABAP vulnerability analysis and mitigation

CVE-2020-6371 is a user enumeration vulnerability affecting SAP NetWeaver Application Server ABAP (POWL test application) versions 710, 711, 730, 731, 740, and 750. The vulnerability was discovered and disclosed in January 2020, allowing attackers to obtain a list of user accounts and expose personal user information (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 4.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. This indicates that the vulnerability requires low attack complexity, needs low privileges, and can be exploited over the network without user interaction (NVD).

When exploited, this vulnerability allows attackers to obtain a list of user accounts and access personal user information from the affected SAP NetWeaver AS ABAP systems, leading to information disclosure (CVE).

The vulnerability requires low attack complexity and low privileges to exploit, making it relatively accessible to attackers with basic access to the network. The attack vector is network-based, allowing remote exploitation (NVD).

SAP has released security notes and patches to address this vulnerability. Users should refer to SAP Security Note 2963137 for detailed mitigation instructions (SAP Note).