Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-31403

Опубликовано: 14 нояб. 2023
Источник: nvd
CVSS3: 9.6
CVSS3: 8
EPSS Низкий

Описание

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sap:business_one:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 32%
0.00124
Низкий

9.6 Critical

CVSS3

8 High

CVSS3

Дефекты

CWE-863
CWE-863

Связанные уязвимости

CVSS3: 9.6
github
около 2 лет назад

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.

EPSS

Процентиль: 32%
0.00124
Низкий

9.6 Critical

CVSS3

8 High

CVSS3

Дефекты

CWE-863
CWE-863