CVE-2023-31403: Improper Access Control vulnerability in SAP Business One product installation
SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this SAP Business One vulnerability?
The vulnerability ID is CVE-2023-31403.
What is the severity of CVE-2023-31403?
The severity of CVE-2023-31403 is critical with a score of 9.6.
What versions of SAP Business One are affected by CVE-2023-31403?
SAP Business One version 10.0 is affected by CVE-2023-31403.
How does CVE-2023-31403 affect SMB shared folders?
CVE-2023-31403 allows malicious users to read, write, execute, or use files in SMB shared folders without proper authentication and authorization checks.
Are there any references or resources available for CVE-2023-31403?
Yes, you can find more information about CVE-2023-31403 at the following references: [Reference 1](https://me.sap.com/notes/3355658) and [Reference 2](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).