CVEvulnerability
CVE-2021-38179
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-10-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Description
Debug function of Admin UI of SAP Business One Integration is enabled by default. This allows Admin User to see the captured packet contents which may include User credentials.
Affected configurations
• sap business one 10.0
References
- https://launchpad.support.sap.com/#/notes/3074819 Permissions Required
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 Vendor Advisory
- https://launchpad.support.sap.com/#/notes/3074819 Permissions Required
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 Vendor Advisory