{"metadata": {"vulnerability": "CVE-2020-26829", "count": 31, "kinds": {"milestone": 4, "sighting": 15, "kev": 0, "other": 12}}, "data": [{"timestamp": "2020-10-07T00:00:00Z", "date_only": false, "value": "2020-10-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-26829", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-08T00:00:00Z", "date_only": false, "value": "2020-12-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-799", "record": "CERTFR-2020-AVI-799", "field": "revisions.0.revision_date"}, {"timestamp": "2020-12-09T16:28:43Z", "date_only": false, "value": "2020-12-09T16:28:43.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-26829", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-12-09T17:15:00Z", "date_only": false, "value": "2020-12-09T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9FV2-MHPR-VP74", "record": "GHSA-9FV2-MHPR-VP74", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-12-09T17:15:00Z", "date_only": false, "value": "2020-12-09T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-26829", "record": "GSD-2020-26829", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-09T17:15:31.057Z", "date_only": false, "value": "2020-12-09T17:15:31.057", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26829", "record": "FKIE_CVE-2020-26829", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-12-09T20:32:55Z", "date_only": false, "value": "2020-12-09T20:32:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18003", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "217d9c9e-9ca4-43fb-bd03-15379fe947e0", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18003"}, {"timestamp": "2020-12-09T20:35:54Z", "date_only": false, "value": "2020-12-09T20:35:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18023", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "c186986c-9d6b-4db9-b0c8-82e8afe4e8ef", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18023"}, {"timestamp": "2020-12-09T20:44:49Z", "date_only": false, "value": "2020-12-09T20:44:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18042", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "e9b8b6ec-a589-45b9-92be-b201f67f0486", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18042"}, {"timestamp": "2020-12-09T21:02:31Z", "date_only": false, "value": "2020-12-09T21:02:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18061", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "2fe329d6-631c-4d94-8a84-4a61026e1ecf", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18061"}, {"timestamp": "2020-12-09T21:23:02Z", "date_only": false, "value": "2020-12-09T21:23:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18080", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "e132aa57-2843-4439-9c9b-51fb67382b50", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18080"}, {"timestamp": "2020-12-09T21:25:26Z", "date_only": false, "value": "2020-12-09T21:25:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18100", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "6b262394-4263-4785-b679-77827ac34fc4", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18100"}, {"timestamp": "2020-12-09T22:23:03Z", "date_only": false, "value": "2020-12-09T22:23:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18119", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "babcfbf6-5e1e-4ff3-bd47-44703fa9ff3c", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18119"}, {"timestamp": "2020-12-09T22:25:22Z", "date_only": false, "value": "2020-12-09T22:25:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18139", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "b7e918e5-2d70-40ff-a618-5a796f5d53c3", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18139"}, {"timestamp": "2020-12-09T22:32:32Z", "date_only": false, "value": "2020-12-09T22:32:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18156", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "5356da03-ea8b-49a9-980c-5671990a4e33", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18156"}, {"timestamp": "2020-12-09T22:35:34Z", "date_only": false, "value": "2020-12-09T22:35:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18176", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "f6cebcf9-7ccd-423a-8e1e-da5a71fb4519", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18176"}, {"timestamp": "2020-12-09T22:52:55Z", "date_only": false, "value": "2020-12-09T22:52:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18195", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "4ad51f00-f3fa-4db9-b31d-d2612230b5a7", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18195"}, {"timestamp": "2020-12-09T23:22:56Z", "date_only": false, "value": "2020-12-09T23:22:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18214", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "d0680d58-b2d2-4d24-96fd-73018266a1e2", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18214"}, {"timestamp": "2020-12-09T23:25:24Z", "date_only": false, "value": "2020-12-09T23:25:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18234", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "ccc7851b-209e-4208-9275-902dfdd7634f", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18234"}, {"timestamp": "2020-12-10T00:22:57Z", "date_only": false, "value": "2020-12-10T00:22:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18253", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "54d4a13b-b50d-4080-9314-47fa7d95be9e", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18253"}, {"timestamp": "2020-12-10T00:25:19Z", "date_only": false, "value": "2020-12-10T00:25:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/18273", "record": "CVE-2020-26829", "field": "creation_timestamp", "uuid": "554b987c-f9ff-4d4d-92e5-e5cf701b6e47", "content": "\u203c CVE-2020-26829 \u203c\n\nSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/18273"}, {"timestamp": "2020-12-15T00:00:00Z", "date_only": true, "value": "2020-12-15", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-03705", "record": "CNVD-2021-03705", "field": "submitTime"}, {"timestamp": "2021-01-18T00:00:00Z", "date_only": true, "value": "2021-01-18", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-03705", "record": "CNVD-2021-03705", "field": "openTime"}, {"timestamp": "2021-06-15T20:06:12Z", "date_only": false, "value": "2021-06-15T20:06:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sap", "record": "CVE-2020-26829", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-07-21T11:39:00Z", "date_only": false, "value": "2021-07-21T11:39Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-26829", "record": "GSD-2020-26829", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T17:35:34Z", "date_only": false, "value": "2022-05-24T17:35:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9FV2-MHPR-VP74", "record": "GHSA-9FV2-MHPR-VP74", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-05-24T17:35:34Z", "date_only": false, "value": "2022-05-24T17:35:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9FV2-MHPR-VP74", "record": "GHSA-9FV2-MHPR-VP74", "field": "modified"}, {"timestamp": "2023-12-13T01:22:09.115Z", "date_only": false, "value": "2023-12-13T01:22:09.115636Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-26829", "record": "GSD-2020-26829", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T16:03:22.449Z", "date_only": false, "value": "2024-08-04T16:03:22.449Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-26829", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T16:03:22.449Z", "date_only": false, "value": "2024-08-04T16:03:22.449Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-26829", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:08:24.680Z", "date_only": false, "value": "2026-06-17T03:08:24.680", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26829", "record": "FKIE_CVE-2020-26829", "field": "lastModified"}], "metrics": {"as_of": "2026-10-29T15:44:07.219Z", "anchors": {"origin": {"timestamp": "2020-12-09T16:28:43Z", "date_only": false, "value": "2020-12-09T16:28:43.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-26829", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2020-12-09T16:28:43Z", "date_only": false, "value": "2020-12-09T16:28:43.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-26829", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 185757324.219355, "hours": 51599.25672759861, "days": 2149.9690303166085, "min_seconds": 185757324.219355, "max_seconds": 185757324.219355, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-12-09T16:28:43Z", "date_only": false, "value": "2020-12-09T16:28:43.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-26829", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T15:44:07.219Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}