Information disclosure

2020-06-1013:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Under certain conditions SAP Business One (Backup service), versions 9.3, 10.0, allows an attacker with admin permissions to view SYSTEM user password in clear text, leading to Information Disclosure.

CPENameOperatorVersion
business_oneeq9.3
business_oneeq10.0

CPE	Name	Operator	Version
	business_one	eq	9.3
	business_one	eq	10.0

References

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775