Input Validation Flaw in SAP Business One Leading to Unauthorized Directory Access
CVE-2021-37532

4.3MEDIUM

Key Information:

Vendor
SAP
Status
SAP Business One
Vendor
CVE Published:
14 September 2021

Summary

An input validation flaw in SAP Business One version 10 allows authenticated users to access restricted directories, potentially exposing sensitive content meant only for high-privileged users. This vulnerability poses risks as it could lead to unauthorized information disclosure within a business environment, thereby compromising the integrity and confidentiality of sensitive data.

Affected Version(s)

SAP Business One < 10.0

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/3075546
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.