CVE-2021-33700

Katalog CVE

CVSS 7.8 · High EPSS 0,21%

Kerentanan Authentication Bypass Using an Alternate Path or Channel pada sap business one. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of the vulnerable application.

Rincian

Terbit di NVD

15 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-288: Authentication Bypass Using an Alternate Path or Channel
CWE-287: Improper Authentication

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 9,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 patch · advisory vendor
• https://launchpad.support.sap.com/#/notes/3073325 permissions required