Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mphg-6g5j-93fg

Опубликовано: 14 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.

EPSS

Процентиль: 32%
0.00124
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 9.6
nvd
около 2 лет назад

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.

EPSS

Процентиль: 32%
0.00124
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-284
CWE-863