Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-32mj-px89-qw66

Опубликовано: 09 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.

EPSS

Процентиль: 17%
0.00257
Низкий

8.8 High

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 8.8
nvd
10 месяцев назад

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of certain APIs. This leads to exposure of sensitive credentials within http response body. As a result, it has a high impact on the confidentiality, integrity, and availability of the application.

CVSS3: 8.8
fstec
10 месяцев назад

Уязвимость системы управления ресурсами предприятия SAP Business One, связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 17%
0.00257
Низкий

8.8 High

CVSS3

Дефекты

CWE-522