CVE-2021-27616

Description

Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One for SAP HANA, allows an attacker to exploit an insecure temporary backup path and to access information which would otherwise be restricted, resulting in Information Disclosure vulnerability highly impacting the confidentiality, integrity and availability of the application.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.034

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in SAP Business One (Service Layer) 10.0	Windows
Vulnerabilities CVE-2021-27614,CVE-2021-27616 are affected in SAP Business One (Service Layer) 8.82	Windows
Vulnerabilities CVE-2021-27614,CVE-2021-27616 are affected in SAP Business One (Service Layer) 9.0	Windows
Vulnerabilities CVE-2021-27614,CVE-2021-27616 are affected in SAP Business One (Service Layer) 9.1	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234