CVE-2021-42066: Medium severity sap business one on hana vulnerability

Published Dec 14, 2021

Updated

SAP Business One - version 10.0, allows an admin user to view DB password in plain text over the network, which should otherwise be encrypted. For an attacker to discover vulnerable function in-depth application knowledge is required, but once exploited the attacker may be able to completely compromise confidentiality, integrity, and availability of the application.

Affected Software

1 affected component

SAP Business One=10.0

Remediation

Patch Available

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035

Event History

Dec 14, 2021

CVE Published

via MITRE·03:44 PM

Data Sourced

via MITRE·03:44 PM

DescriptionWeakness

Data Sourced

via NVD·04:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID of this SAP Business One vulnerability?

The vulnerability ID of this SAP Business One vulnerability is CVE-2021-42066.

What is the severity level of CVE-2021-42066?

The severity level of CVE-2021-42066 is medium, with a severity value of 4.4.

What is the affected software for CVE-2021-42066?

The affected software for CVE-2021-42066 is SAP Business One version 10.0.

What does CVE-2021-42066 allow an attacker to do?

CVE-2021-42066 allows an attacker to view the DB password in plain text over the network, which should otherwise be encrypted.

How can I fix CVE-2021-42066?

To fix CVE-2021-42066, it is recommended to apply the necessary patches or updates provided by SAP Business One.