CVE-2022-32249

Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to gain access to highly sensitive information e.g., high privileged account credentials...

CVE-2022-32249

The CVE describes an information-disclosure vulnerability in SAP Business One and SAP HANA cockpit under specific integration scenarios. The root cause is insufficient access control in the Cockpit component, enabling a remote attacker to access the HANA cockpit’s data volume and obtain highly se...