Sensitive Information Disclosure in SAP Business One by SAP
CVE-2021-44234
5.5MEDIUM
Summary
SAP Business One version 10.0 contains a vulnerability where the extended log feature stores sensitive information. This information may provide attackers with valuable insights, potentially compromising user data and overall system security. Organizations utilizing this version are advised to evaluate their logging configurations and implement appropriate security measures to mitigate risks associated with sensitive data exposure.
Affected Version(s)
SAP Business One < 10.0
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved