Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-42066

Опубликовано: 14 дек. 2021
Источник: nvd
CVSS3: 4.4
CVSS2: 3.5
EPSS Низкий

Описание

SAP Business One - version 10.0, allows an admin user to view DB password in plain text over the network, which should otherwise be encrypted. For an attacker to discover vulnerable function in-depth application knowledge is required, but once exploited the attacker may be able to completely compromise confidentiality, integrity, and availability of the application.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sap:business_one:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 31%
0.0012
Низкий

4.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-312
CWE-312

Связанные уязвимости

github
около 4 лет назад

SAP Business One - version 10.0, allows an admin user to view DB password in plain text over the network, which should otherwise be encrypted. For an attacker to discover vulnerable function in-depth application knowledge is required, but once exploited the attacker may be able to completely compromise confidentiality, integrity, and availability of the application.

EPSS

Процентиль: 31%
0.0012
Низкий

4.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-312
CWE-312