CRITICAL🇵🇱 Wersja polska

CVE-2023-31403

CVSS 9.6v3.1pub. 2023-11-14upd. 2024-11-21

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Sap Business One

    APP
    Sap
    10.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-38180CRITICAL9.8ten sam produkt

SAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to Excel (CSV injec...

CVE-2016-6256CRITICAL9.6ten sam produkt

SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via cr...

CVE-2023-33993HIGH7.1ten sam produkt

B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to...

CVE-2023-39437HIGH7.6ten sam produkt

SAP business One allows - version 10.0, allows an attacker to insert malicious code into the content of a web ...

CVE-2022-35292HIGH7.8ten sam produkt

In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclo...