CVEvulnerability
CVE-2021-27614
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-05-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- CVSS 3.0 ([email protected])
- 7.3 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-74
Description
SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application thereby highly impacting the integrity and availability of the application.
Affected configurations
• sap business-one-hana-chef-cookbook 0.1.6
• sap business-one-hana-chef-cookbook 0.1.7
• sap business-one-hana-chef-cookbook 0.1.19
• sap business one 8.82
• sap business one 9.0
• sap business one 9.1
• sap business one 9.2
• sap business one 9.3
• sap business one 10.0
Related
Weakness · CWE (1)
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
References
- https://launchpad.support.sap.com/#/notes/3049661 Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655 Vendor Advisory
- https://launchpad.support.sap.com/#/notes/3049661 Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=576094655 Vendor Advisory