CVE-2021-42066
First published: Tue Dec 14 2021(Updated: )
SAP Business One - version 10.0, allows an admin user to view DB password in plain text over the network, which should otherwise be encrypted. For an attacker to discover vulnerable function in-depth application knowledge is required, but once exploited the attacker may be able to completely compromise confidentiality, integrity, and availability of the application.
Credit: cna@sap.com cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap Business One | =10.0 | |
| =10.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this SAP Business One vulnerability?
The vulnerability ID of this SAP Business One vulnerability is CVE-2021-42066.
What is the severity level of CVE-2021-42066?
The severity level of CVE-2021-42066 is medium, with a severity value of 4.4.
What is the affected software for CVE-2021-42066?
The affected software for CVE-2021-42066 is SAP Business One version 10.0.
What does CVE-2021-42066 allow an attacker to do?
CVE-2021-42066 allows an attacker to view the DB password in plain text over the network, which should otherwise be encrypted.
How can I fix CVE-2021-42066?
To fix CVE-2021-42066, it is recommended to apply the necessary patches or updates provided by SAP Business One.
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/remedy
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/tags
- agent/softwarecombine
- agent/event
- vendor/sap
- canonical/sap business one
- version/sap business one/10.0