CVE-2021-38179: Medium severity SAP Business One vulnerability
Debug function of Admin UI of SAP Business One Integration is enabled by default. This allows Admin User to see the captured packet contents which may include User credentials.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the Debug function of the Admin UI of SAP Business One Integration (it is enabled by default) to prevent Admin users from viewing captured packet contents that may include user credentials.
SAP Business One Integration Admin UI Debug function of Admin UI = disabled
Event History
Frequently Asked Questions
What is CVE-2021-38179?
CVE-2021-38179 is a vulnerability in the debug function of the Admin UI of SAP Business One Integration version 10.0.
How does CVE-2021-38179 impact SAP Business One Integration?
CVE-2021-38179 allows the admin user to see captured packet contents, which may include user credentials.
How severe is CVE-2021-38179?
CVE-2021-38179 has a severity rating of medium, with a CVSS score of 4.9.
Is the debug function of the Admin UI enabled by default in SAP Business One Integration?
Yes, the debug function of the Admin UI is enabled by default in SAP Business One Integration version 10.0.
How can I fix CVE-2021-38179 in SAP Business One Integration?
To fix CVE-2021-38179, it is recommended to disable the debug function of the Admin UI or apply the necessary patches provided by SAP.