Description

SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.

Related CPE's

a

sap

business_one

10.0

Vulnerable

References

https://launchpad.support.sap.com/#/notes/3075546

Permissions Required

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-22

[email protected]

Secondary
CWE-22

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.3 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-09-14T12:15:10.103

3 years ago

Last modified

2021-09-23T19:49:42.113

3 years ago