Improper Access Control vulnerability in SAP Business One product installation

CVE-2023-31403

What is CVE-2023-31403?

The SAP Business One installation version 10.0 lacks proper authentication and authorization checks for SMB shared folders, allowing malicious users to gain unauthorized access. This vulnerability permits these users to read and write files within the shared folder, significantly compromising the confidentiality, integrity, and availability of sensitive data. The potential for execution or misuse of files during the installation process poses additional risks, emphasizing the need for immediate remediation.

References