Local Authentication Bypass Flaw in SAP Business One

CVE-2021-33700

What is CVE-2021-33700?

SAP Business One, version 10.0, contains a vulnerability that permits a local attacker with access to the victim's browser to log in as the victim without needing to know their password. This access could potentially expose highly sensitive information, leading to unauthorized control over the vulnerable application. The implications of this vulnerability emphasize the importance of securing web browsers and access points to prevent exploitation.

References