Description

SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.

Related CPE's

a

sap

business_one

10.0

Vulnerable

References

https://launchpad.support.sap.com/#/notes/3075546

Permissions Required

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405

Vendor Advisory

https://launchpad.support.sap.com/#/notes/3075546

Permissions Required

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-22

[email protected]

Primary
CWE-22

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.3 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-09-14T10:15:10.103Z

4 years ago

Last modified

2024-11-21T05:15:19.350Z

1 year ago