Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-32mj-px89-qw66

Опубликовано: 09 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.

EPSS

Процентиль: 9%
0.00032
Низкий

8.8 High

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 8.8
nvd
5 месяцев назад

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.

CVSS3: 8.8
fstec
5 месяцев назад

Уязвимость системы управления ресурсами предприятия SAP Business One, связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 9%
0.00032
Низкий

8.8 High

CVSS3

Дефекты

CWE-522