CVE:CVE-2020-6249
CNNVD:CNNVD-202005-501
SAP Master Data Governance是德国思爱普（SAP）公司的一套用于维护、验证和分发主数据的数据管理工具。
SAP Master Data Governance中存在SQL注入漏洞。攻击者可通过执行特制的数据库查询语句利用该漏洞获取后端数据库信息。以下产品及版本受到影响：SAP Master Data Governance S4CORE 101版本，S4FND 102版本、103版本、104版本，SAP_BS_FND 748版本。
solution:Upgrade sap master_data_governance_(s4core) to a higher version than 101,and avoid the version 101; Upgrade sap master_data_governance_(s4fnd) to a higher version than 102,103,104,and avoid the version 102,103,104; Upgrade sap master_data_governance_(sap_bs_fnd) to a higher version than 748,and avoid the version 748