Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-100008
HistoryNov 16, 2023 - 12:00 a.m.

SAP Business One Access Control Error Vulnerability

2023-11-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
sap business one
enterprise management
software
financial management
operations management
human resource management
access control
vulnerability
authentication
authorization
smb
shared folders
attack}.

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. An access control error vulnerability exists in SAP Business One version 10.0, which stems from not performing proper authentication and authorization checks on SMB shared folders. An attacker could exploit the vulnerability to read and write to the SMB shared folder.

CPENameOperatorVersion
sap sap business oneeq10.0

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CNVD-2023-100008