Database Exposure Vulnerability in SAP Business One

CVE-2021-42066

Summary

The vulnerability exists in SAP Business One version 10.0, where an admin user can access database passwords in plain text while transmitted over the network, violating data protection principles. Although exploiting this flaw requires deep knowledge of the application, successful exploitation could lead to significant risks, including a total compromise of the application's confidentiality, integrity, and availability. Organizations using this software must ensure they apply necessary patches and take proactive measures to secure their database connections.

References